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There’s  battle  tested 
. . .  and  then  there’s 
the  Israeli  military 

The  Silicon  Valley  of 
the  Middle  East. 

■  BY  ANN  BEDNARZ 

At  an  age  when  many 
young  adults  are  just 
entering  the  workforce 
in  entry-level  positions,  Gidi 
Cohen  was  leading  an  elite 
software  development  unit 
charged  with  building  infor¬ 
mation  security  solutions  for 
the  Israeli  military. 

“I  was  21,  running  signifi¬ 
cant  budgets,  with  tons  of 
projects  under  development 
and  lots  of  people  reporting 

to  me,"  recalls  Cohen,  who  served  from  1987  to  1992  in  the 
Israeli  military’s  intelligence  corps. 

Having  command  over  large  projects  at  such  a  young  age 

See  Israel,  page  14 


fc  I  [Israel  is]  a  great 
place  to  innovate,  but 
it  can  be  difficult  to 
sustain  that  effortll 

Philippe  Szwarc 

CEO,  Arel  Communications 
and  Software 


Directory  on  tap 
for  open  source 


■  BY  JOHN  FONTANA  AND 
JENNIFER  MEARS 

Red  Hat  next  month  is  expected 
to  provide  a  missing  link  in  the 
open  source  software  infra¬ 
structure  with  its  release  of 
source  code  for  the  Netscape 
directory  server  it  acquired  last 
year  from  AOL. 

A  few  weeks  after  that  free 
server  is  made  available,  Red  Hat 
is  scheduled  to  release  a  com¬ 
mercial  version  of  the  Lightweight 
Directory  Access  Protocol 
(LDAP)-based  directory  called 
Red  Hat  Directory  Server. This  will 
include  services  and  support  for  a 
monthly  subscription  fee, and  give 
Red  Hat  another  piece  in  its  evolv¬ 
ing  middleware  stack. 


Red  Hat  is  expected  to  make 
the  announcement  at  its  Red  Hat 
Summit  June  1-3,  although  the 
company  would  not  confirm  that 
timetable. 

Besides  creating 
a  data  store  to  man¬ 
age  user  and  policy 
information  for  au¬ 
thentication  and  authorization, 
the  addition  of  an  open  source 
directory  could  lead  to  an  expan¬ 
sion  of  security  and  identity  man¬ 
agement  tools  on  Linux  and 
other  open  source  platforms  that 
may  raise  their  enterprise  value. 

“Without  a  directory,  it’s  been 
difficult  to  position  Linux  as  an 
enterprise  system,”  says  John 
Enck,  an  analyst  with  Gartner. 
“The  directory  is  core  to  every¬ 


thing.  If  you  look  at  where  all 
the  vendors  are  going,  every¬ 
body  is  trying  to  create  the 
directory  as  a  foundation  piece 
and  tie  their  stack 
of  software  to  it.” 

The  open  source 
community  has 
been  trying  to  ad¬ 
dress  the  directory  issue,  but  the 
OpenLDAP  project,  which  Red 
Hat  implements  and  ships  with  its 
operating  system,  has  been  criti¬ 
cized  for  not  providing  scalability 
to  complement  the  so-called 
open  source  LAMP  stack:  Linux, 
Apache,  MySQL  and  Ferl/PHP/ 
Python. 

In  comparison,  Netscape  re¬ 
leased  its  Directory  Server  in  1996 

See  Red  Hat,  page  8 


■  IBM,  Red  Hat  join 
forces  vs.  Sun.  Page  27. 


Businesses  follow  carriers'  MPLS  lead 


■  BY  JIM  DUFFY 

NEW  YORK  —  MPLS  is  not  just 
for  carriers  anymore. 

That  was  one  key  message  ema¬ 
nating  from  the  MPLScon  confer¬ 
ence  in  New  York  last  week,  as 
companies  now  are  reaping  the 


benefits  of  Multi-protocol  Label 
Switching  technology  that  was 
created  in  1997  to  bring  more 
ATM-like  characteristics  to  IP 
Corporations  looking  to  improve 
QoS,  facilitate  any-to-any  commu¬ 
nications  and,  converge  several 
legacy  and  next-generation  ser¬ 


vices  on  a  common  infrastructure 
are  taking  a  long  look  at  MPLS. 

MPLS  was  created  to  improve 
the  price/performance,  scalabil¬ 
ity  and  flexibility  of  network-layer 
routing.  It  does  this  by  using 
“labels”  in  the  fields  of  packets  to 
reduce  route-processing  over¬ 
head,  steer  traffic  onto  explicit 
paths  and  provide  improved  be 
havior  to  packet  routing. 

This  label-switching  technique 
was  later  identified  as  a  way  to 
engineer  traffic  on  IP  backbones, 
facilitate  QoS  and  construct 
VPNs.  And  though  these  capabili¬ 
ties  were  initially  targeted  at  ser¬ 
vice  providers  migrating  from 
See  MPLS,  page  10 


drive  car  of  the 


Satellite  navigation, 
motorist-aid  services 
and  built-in  enter¬ 
tainment  systems 
are  nothing.  Car- 
makers  are  looking 
at  everything  from 
in-vehicle  Internet 
access  to  remote 
diagnostics  and 
information  services 
for  the  connected  car. 
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Networks  drive  car 
of  the  future: 

Automakers  are  turning  cars  into 
networked  devices  that  use  stan¬ 
dards  such  as  Bluetooth  and  Wi-Fi  to 
offer  a  communications  platform, 
advanced  diagnostics,  and  even  the 
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Page  70. 

^  Buffalo's  TeraStation  is  a 
high-powered  NAS  box 
that  offers  IT  byte  of 
storage,  but  lacks  some  advanced 
management  features.  Page  76. 
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Extending  a  wireless  access  point 

A  reader  asks:  Is  it  possible  to  connect  multiple  wireless  access 
points  to  a  single  high-gain  outdoor  aerial  if  I  made  a  custom 
splitter  cable?  He  asks  because  he  wants  to  double  the  number  of 
users  in  his  building  with  wireless  laptops. 

DocFinder:  7245 

Firewall  and  LAN  best  practices 

Have  suggestions  for  a  user  setting  up  a  new  network? 

DocFinder:  7246 

Desktop  management  Buyer’s  Guide 

If  intrusion-prevention  is  on  your  to-buy  list,  head  to  our  updated 
Buyer's  Guide,  where  you  can  find  and  compare  the  specifics  on 
19  different  applications. 

DocFinder:  7247 

Network  World  Radio 

Tracking  content  at  MLB.com 

Usten  in  as  Justin  Shaffer,  vice  president  and  chief  architect  for 
MLB  Advanced  Media,  explains  how  Major  League  Baseball  serves  up 
live  streaming  audio  and  video  to  fans. 

DocFinder.  7248 

Seminars  and  Events 

Wireless  &  Mobility: 

Commanding  Broadband  Everywhere 

Suffering  "analysis  paralysis"  when  it  comes  to  Wireless  LAN  or 
WAN?  The  latest  wireless  services  or  subscriber  units?  Wireless 
tools  or  apps?  This  is  your  breakthrough  event,  coming  to  Boston 
and  Denver.  Qualify  now  to  attend  free, 

DocFinder:  7045 


Nutter’s  Help  Desk 

NetWare  and  Windows  XP  SP2 

Help  Desk  guru  Ron  Nutter  helps  a  user  whose  Windows  XP  desk¬ 
tops  can't  connect  to  a  NetWare  server  running  NDS  7, 

DocFinder:  7250 

Home  Base 

Creating  a  crib  sheet 

No  small  business  should  be  without  a  comprehensive  written 
inventory  of  its  software  and  hardware,  Sandra  Gittlen  advises. 

DocFinder:  7251 

Smail-Business  Tech 

USB  drives  good  for  backup? 

Columnist  James  Gaskin  writes:  Eqjoy  your  USB  drives,  as  my  son 
enjoys  the  one  I  bought  him  to  back  up  his  notebook  at  college. 
Just  don't  think  you're  going  to  use  them  to  back  up  several  com¬ 
puters,  because  it  won't  happen,  I  promise. 

DocFinder:  7252 


Compendium 

A  new  community  platform 

Executive  Online  Editor  Adam  Gaffin  explains  why  were  migrating 
our  Weblogs  and  forums  to  an  open  source  platform  called 
Drupal. 

DocFinder:  7253 


| 

Free  e-maii 
newsletters 

Sign  up  for  any  of  more  than 
50  newsletters  on  key 
network  topics. 

DocFinder:  1002 


What  is  DocFinder? 

We've  made  it  easy  to  access  arti¬ 
cles  and  resources  online.  Simply 
enter  the  four-digit  DocFinder  num¬ 
ber  in  the  search  box  on  the  home 
page,  and  you'll  .jump  directly  to  the 
requested  information. 


SUBSCRIPTIONS/CHANGE  OF  ADDRESS:  Phone:  (508)  490-6444;  Fax:  (508)  490- 
6400;  E-mail:  nwcirc@nww.com;  URL:  www.subscribenw.com 


BfNetworkWorld 


5/23/05 


Movement  afoot  on  E911  services 

■  The  FCC  last  week  issued  an  order  that  requires  VoIP  service 
providers  to  offer  E911  service  before  year-end.  In  a  unanimous 
decision,  the  FCC  said  that  companies  such  asVonage  and  8x8  have 
120  days  to  ensure  users  will  be  routed  to  emergency  call  centers. 
In  order  for  VoIP  service  providers  to  support  E911  services,  they 
must  strike  deals  with  the  incumbent  local  exchange  carriers, 
BellSouth,  Qwest,  SBC  and  Verizon.  On  the  same  day  the  FCC  made 
its  order  public, Vonage,  the  largest  residential  VoIP  service  provider, 
with  700,000  customers,  announced  it  had  reached  such  deals  with 
BellSouth  and  SBC.  Vonage  previously  announced  an  agreement 
with  Verizon  and  says  it  is  in  talks  with  Qwest.  While  the  order 
requires  VoIP  service  providers  to  support  E91  l,the  FCC  is  not  forc¬ 
ing  these  companies  to  track  when  a  customer  relocates  an 
Internet  phone  number. This  could  lead  to  a  problem  in  which  91 1 
operators  might  not  have  the  correct  location  of  an  Internet  caller. 

IBM,  Nortel  to  collaborate  on  telecom 

■  Nortel  has  entered  into  an  agreement  with  IBM  to  jointly  develop  products  for  the  tele¬ 
com  industry  The  agreement,  signed  last  week,  initially  will  focus  on  the  development  of 
carrier-grade  servers  for  communications  providers  that  will  be  based  on  IBM’s 
BladeCenter  server  design. The  two  companies  have  established  a  30-person  joint  devel¬ 
opment  center  in  Research  Triangle  Park,  N.C.,  but  spokesmen  from  IBM  and  Nortel  were 
unable  to  provide  many  details  on  the  project,  which  IBM  Business  Consulting  Services 
Partner  Steve  Hasselmann  characterizes  as  a  “strategic  alliance.”  In  addition  to  the 
BladeCenter  servers,  IBM  plans  to  provide  engineering  and  technical  services  to  help 
Nortel  develop  a  range  of  products  for  multimedia  services, VoIRand  wired  and  wireless 
broadband  services,  Hasselmann  says. 

Wireless  LAN  initiative  stumbles 

■  The  IEEE  802. 1 1  n  task  group  last  week  handed  a  major  setback  to  a  vendor  group  back¬ 
ing  one  approach  to  super-high-bandwidth  wireless  LANs.  Members  of  that  group, 
TGnSync,  had  moved  to  adjourn  last  week’s  meeting  in  Australia  without  taking  a  second 
confirmation  vote  on  the  group’s  802. 1  In  technology  proposal.  However, a  vote  was  taken 
and  the  proposal  garnered  only  about  two-thirds  of  the  votes  needed  for  it  to  be  accept¬ 
ed  as  the  basis  for  a  draft  standard. That  setback  means  the  chief  alternative  plan,  from  a 
second  vendor  group  called  World-Wide  Spectrum  Efficiency  can  now  be  reconsidered, 
along  with  the  TGnSync  plan.  Both  plans  are  based  on  a  technology  called  multiple- 
input/multiple-output,  which  proponents  say  will  boost  WLAN  throughput  to  greater  than 
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Phishing  justice,  frontier  style 

etc  raft  reports  that  online  vigilantes  have  started  taking  down  phishing  sites. 

Seems  that  if  fraudsters  can  take  over  compromised  Web  sites  for  phishing,  the  vigi¬ 
lantes  Gan  use  the  same  techniques  to  lock  out  the  fraudsters  -  and  post  warnings 

OR  the  site.  Now  that  you  are  hooked,  read  more  at  www.networkworld. 
com,  DocFinder:  7244. 
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Amber  comes  to  cell  phones.  The  wireless  industry  and  the 
National  Center  for  Missing  &  Exploited  Children  have  joined  forces  to  bring  Amber 
alerts  to  cell  phone  subscribers.  The  alerts,  which  help  to  track  down  missing 
children,  can  be  received  via  text  messaging  by  subscribers  to  participating  carriers' 
networks.  Register  at  www.wirelessamberalerts.org. 

Risky  business.  Only  two-thirds  of  end  users  in  the  U.S.  surveyed  by 
AIIM,  a  trade  group  for  content  management  companies,  consider  the  process  by 
which  electronic  information  is  managed  to  be  "very  important"  or  "quite  important" 
relative  to  potential  future  litigation.  This  contrasts  with  95%  of  German  users  and 
83%  of  U.K.  users,  according  to  AIIM,  which  surveyed  1,200  end  users  worldwide. 

Bosses  beware.  Revenge  against  bosses  is  the  primary  motivation  for 
those  corporate  insiders  who  sabotage  computers  even  though  doing  so  can  threaten 
national  security  and  the  economy, 
according  to  a  study  paid  for  in  part  by 
the  Department  of  Homeland  Security. 

The  study  (www.networkworld.com, 

DocFinder:  7243),  which  examined 
dozens  of  cases  over  the  past  six 
years,  found  that  the  saboteurs 
often  worked  in  technology 
departments  and  showed  signs 
of  discontent  before  the 
attacks.  > 


300M  bit/sec,  although  the  standard  will  call  for  a  minimum  of  about  100M  bit/sec.  That 
compares  with  today’s  802.1  la  and  1  lg  throughput  of  20M  to  24M  bit/sec. 

Google  releases  enterprise  seareh  tool 

■  Google  last  week  made  available  a  free  desktop  search  tool  tailored  for  the  workplace 
—  called  Google  Desktop  Search  for  the  Enterprise  —  about  eight  months  after  it  intro¬ 
duced  a  similar  tool  for  consumers.  Like  its  cousin,  Google  Desktop  Search  for  the 
Enterprise  is  designed  to  let  users  find  information  stored  in  their  PCs  such  as  e-mails, 
documents  and  photos.The  products  share  a  controversial  feature:They  take  snapshots  of 
every  Web  page  a  user  views  and  index  the  content.  Some  users  have  expressed  concern 
this  might  be  counterproductive  if  sensitive  or  confidential  information  is  captured  as  a 
user  surfs  the  Web.  Users  can  configure  both  tools  not  to  capture  secure  HTTPS  Web  pages. 
Unlike  the  consumer  product,  Google  Desktop  Search  for  the  Enterprise  has  a  series  of 
installation,  distribution,  management  and  security  features  for  IT  departments  to  use 
when  rolling  out  and  configuring  the  product. 

SAP  aligns  allies  for  S0A  platform 

■  Several  big-name  companies,  including  Adobe,  Cisco  and  Intel,  have  agreed  to  embrace 
SAP’s  new  service-oriented  architecture  platform, SAP  announced  last  week.The  deals  fol¬ 
low  agreements  reached  last  month  with  IBM,  Macromedia  and  Microsoft.  In  2003,  SAP 
launched  its  own  SOA  technology  called  Enterprise  Services  Architecture.  ESA  uses  Web 
services  and  SAP’s  NetWeaver  middleware  and  integration  platform  to  let  users  craft  busi¬ 
ness  processes  over  heterogeneous  applications.  The  new  ESA  partners  will  license  the 
technology  to  optimize  their  products  to  run  SAP  applications. 
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BMC  overhauls  management  software 


a  BY  DENISE  DUBIE 

At  management  software  ven¬ 
dor  BMC,  these  days  it’s  all  about 
streamlining. 

The  company  last  month  said  it 
is  shedding  12%  of  its  staff  to  tight¬ 
en  expenses  in  the  face  of  disap¬ 
pointing  revenue.  And  this  month 
BMC  says  it  is  revamping  its  prod¬ 
uct  line,  consolidating  previously 
separate  software  packages  and 
simplifying  licensing. 

The  company  this  year  and  next 
will  eliminate  the  Patrol  brand 
it  has  touted  since  acquiring  the 
system  management  technology 
in  1994  and  reinvent  its  product 
portfolio  under  the  moniker 
Performance  Manager.  Among  the 
new  offerings  planned  is  Perform¬ 
ance  Manager  for  Servers,  a  com¬ 
bination  of  Patrol  for  Unix  and 
Patrol  for  Windows. 

The  changes  won’t  be  in  name 
alone.  BMC  has  redesigned  its 
core  software  so  customers  get 
agent-based  and  agentless  prod¬ 
ucts  under  the  same  license. 
Previously  customers  needed  to 
buy  agent-based  Patrol  and  agent¬ 
less  Patrol  Express  separately. 

Products  within  the  Perform¬ 
ance  Manager  line  also  will  share 


a  database,  a  console  for  configu¬ 
ration  and  provisioning,  and  a 
user  interface  for  reporting. 

“The  trend  right  now  among 
management  vendors  is  to  fix  all 
the  installation,  integration  and 
performance  problems  in  their 
existing  tools  and  supplement 
them  with  features  to  help  IT 
managers  get  a  consistent  way  to 
measure  performance  and  avail¬ 
ability  across  their  network  infra¬ 
structure,  security  and  applica¬ 
tions,”  says  George  Hamilton,  a 
senior  analyst  at  The  Yankee 
Group. 

Industry  watchers  say  BMC 
needed  to  do  something  to 
breathe  life  into  its  $1.4  billion 
business.  It  announced  last 
month  that  preliminary  revenue 
estimates  for  the  fourth  quarter  of 
its  fiscal  year  2005,  ended  March 
31,  would  fall  below  expectations, 
at  $388  million  to  $400  million, 
down  from  the  previous  forecast 
of  $410  million  to  $425  million. 
BMC  cited  customers’  delayed 
spending  as  a  reason  for  the 
lower  revenue. 

“BMC,  and  in  particular  Com¬ 
puter  Associates,  this  year  really 
have  to  prove  they  are  going  to 
deliver  on  their  product  plans  to 


customers  to  maintain  their 
installed  bases,”  Hamilton  adds. 

That  includes  sorting  out  and 
integrating  technologies  acquired 
from  Calendra,  Marimba  and 
OpenNetwork  to  fill  out  its  long¬ 
term  business  service  manage¬ 
ment  strategy  BMC  has  named 
Tom  Bishop,  formerly  with  Vieo 
and  Tivoli,  to  lead  its  technology 
direction  as  CTO. 

“It’s  important  BMC  streamline 
it’s  technology  because  manage¬ 
ment  tools  can  be  expensive,  and 
it  needs  to  keep  its  customers  as 
the  market  is  going  to  continue  to 
consolidate,”  says  Lance  Travis,  a 
vice  president  with  AMR  Re- 
search.“The  redesigned  Patrol  will 
also  better  serve  the  company’s 
bigger  plans  of  [business  service 
management]  in  the  long  term.” 

In  an  attempt  to  make  its  soft¬ 
ware  more  attractive,  BMC  is 
focusing  on  basics, such  as  easing 
installation. 

Performance  Manager,  using 
provisioning  technology  BMC 
acquired  via  Marimba  last  July 
will  distribute  agents  only  to 
servers  that  require  higher-level 
management  and  will  do  so  auto¬ 
matically  based  on  customer 
configurations.  Patrol  depended 
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Crowded  field 

BMC  is  one  of  a  handful  of 
vendors  whose  products 
are  commonly  used  for 
infrastructure  manage¬ 
ment.  Here’s  how  vendors 
stacked  up  when  56 
financial  firms  were  asked 
about  which  companies’ 
products  they  use.* 
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•Multiple  responses  accepted 
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on  centralized  server  software, 
and  required  an  agent  be 
installed  on  every  managed  serv¬ 
er  to  deliver  on  its  performance 
and  availability-management 
promises.  Patrol  Express  was 
designed  without  agents  to  help 
customers  remotely  manage  sys¬ 
tems  at  branch  offices. 

BMC  customer  Marc  Machin, 
senior  systems  engineer  at 
Lender’s  Service  in  Santa  Ana, 
Calif., says  he’s  looking  forward  to 
the  upcoming  changes. 

“Anything  that  could  lighten 
the  footprint  of  management 
software  on  a  machine  would 
be  welcome,"  says  Machin,  who 
maintains  six  consoles  for 
Patrol  applications  across  a  net¬ 
work  of  150  Windows  servers. 
“I’d  still  like  an  agent  on  certain 
servers  to  automatically  take  an 
action  or  react  to  an  event,  but 
there  are  more  servers  that 
don’t  need  agents  than  there 
are  ones  that  do.” 

In  June,  BMC  says  it  will  start 
to  offer  its  single-license  model 
to  customers  under  the  new 
brand,  and  in  December  the 
company  expects  to  start  ship¬ 
ping  new  products  with  the 
architecture.  ■ 


Red  Hat 

continued  from  page  1 

and  pundits  hailed  the  scalability 
and  administrative  controls  of  the 
standards-based  software,  which 
ignited  centralization  of  corporate 
directory  information.  The  direct¬ 
ory  was  the  foundation  for  a  major 
U.S.  Department  of  Defense  project 
in  the  late  1990s  to  secure  military 
information  systems. 

Red  Hat’s  commercial  version  of 
the  directory  is  a  challenge  to  ven¬ 
dors  that  have  commercial  Linux- 
based  directories  but  do  not  open 
the  source  code  for  public  con¬ 
sumption.  Those  vendors  include 
IBM,  Oracle  and  Sun  and  Novell, 
which  has  ported  eDirectory  to  Linux  along  with  a  com¬ 
plement  of  identity  management  and  security  tools. 

“Their  challenge  is  the  other  parts  of  identity  and  access 
management  and  security  around  this  directory  technol¬ 
ogy;  how  do  they  plan  to  [develop]  that  aspect  of  it?”  says 
Ashish  Larivee,  director  of  product  marketing  for  Novell. 

While  the  directory  only  is  infrastructure,  what  it  supports 
in  terms  of  security  and  access  control  is  mandatory  for 
today’s  Web-based  distributed  corporate  networks.  It  is 
those  directory-enabled  tools  that  are  key  not  only  to  the 
success  of  LAMP  but  also  to  Red  Hat,  experts  say 

“This  is  part  of  Red  Hat  evolving  from  just  an  operating 
system  company  to  more  of  a  software  compan/  says 
Gordon  Haff,  an  analyst  with  Illuminata.“The  more  signifi¬ 
cant  issue  is  the  difficulty  of  tying  all  the  pieces  together 


into  a  single  stack  that  really  works  together. 
That’s  where  Red  Hat  is  moving.” 

That  stack  competes  with  those  from  IBM, 
Microsoft,  Oracle  and  Sun. 

Red  Hat’s  plan  is  to  open  source  all  of  the 
Netscape  technology  it  acquired  under  the 
General  Public  License  (GPL), says  Leigh  Day 
a  company  spokesperson. 

“Open  source  architecture  is  our  long-term 
strategy”  Day  says.“  [Red  Hat  Directory  Server] 
is  going  to  provide  another  critical  piece  of 
business  infrastructure  that’s  standards-based 
for  open  source  architectures.  Red  Hat  is  very 
committed  to  making  sure  all  of  the  software 
that  we  deliver  for  enterprise  infrastructure  is 
made  available  under  the  GPL.  We  think  that’s 
just  better  business.” 

Last  September, Red  Hat  spent  $23  million  to 
purchase  from  AOL  the  Netscape  directory 
technology  along  with  the  former  dot-com  darling’s 
Certificate  Server  for  handling  digital  certificates. 

Industry  experts  say  the  transition  to  a  directory  vendor 
won’t  be  an  easy  one. 

“They  are  going  to  face  all  the  same  integration  problems 
that  every  other  directory  vendor  has  faced,”  says  Jackson 
Shaw,  vice  president  of  product  management  for  Vintela, 
which  develops  technology  to  integrate  Unix,  Linux,  Java, 
and  Macintosh  with  Windows-based  systems.  “How  do  I 
integrate  with  heterogeneous  systems?  How  do  1  integrate 
with  the  Microsoft  directory  the  Novell  directory?  They  will 
have  directory  synchronization  issues,  meta  directory 
issues,  authentication  issues,”  says  Shaw,  who  helped  archi¬ 
tect  Microsoft’s  Active  Directory 

Red  Hat  has  begun  the  work.  Last  month  it  released  a 


technology  preview  with  updates  to  Red  Hat  Directory 
Server  that  included  Windows  user  synchronization,  rights 
control  and  replication  features. 

Tim  Howes,  the  co-author  of  the  LDAP  specification  and 
architect  of  the  original  Netscape  Directory  Server,  says  the 
directory  will  be  good  for  the  open  source  community 
“Like  other  infrastructural  components  it  is  important  the 
directory  be  robust,  stable,  and  this  will  help  get  it  there,” 
says  Howes,  who  is  now  the  CTO  of  automation  software 
company  Opsware. 

Industry  observers  say  only  time  will  tell  the  significance 
of  an  open  source  directory. 

“If  it  became  a  hot  open  source  project,  then  maybe  you 
build  a  virtualization  engine  that  competes  with  virtual 
directory  vendors  or  a  synchronization  engine  that  com¬ 
petes  with  meta-directory  providers, "says  Jamie  Lewis, pres¬ 
ident  of  Burton  Group.“If  it  really  caught  fire,  those  are  the 
kinds  of  things  that  would  show  this  is  a  significant  effort.” 

Competitors  say  Red  Hat  is  in  catch-up  mode. 

“Red  Hat’s  move  doesn’t  address  the  real  customer  need 
for  a  complete  directory  service  or  other  key  identity  man¬ 
agement  requirements  customers  are  looking  for  like  pro¬ 
visioning,  access  management,  federation  and  identity  aud¬ 
iting,  all  of  which  Sun  provides,” says  Don  Bowen,  director  of 
marketing  for  Sun’s  Directory  Server  Enterprise  Edition. 

‘Adding  one  more  LDAP  directory  to  the  mix  of  existing 
LDAP  directories  doesn’t  help  customers  with  single  sign- 
on,  access  management,  secure  wireless  and  remote 
access,  desktop  management,  managing  security  updates, 
information  protection, smartcard  logon,  printer  discover^’ 
says  Michael  Stephenson,  Microsoft’s  group  product  man¬ 
ager  for  Windows  Server.  “Active  Directory  provides  cus¬ 
tomers  with  these  capabilities  and  more  without  requiring 
the  customer  to  do  the  costly  integration  work.”  ■ 


What’s  LAMP? 

The  open  source 
community  refers  to  its 
software  stacfl  as  LAMP: 
Linux,  Apache,  MySQL  and 
Perl/PHP/Python. 


Product 

Description 

Linux 

The  kernel  and 
operating  system 

Apache 

Web  application 
server  platform 

MySQL 

Database 

Perl/PHP 

/Python 

Development  tools 

NetScaler  makes 

any  application 

run  up  to 

5  times  faster 

for  anyone,  anywhere. 


Every  day,  leading  Global  2000  enterprises, 
including  the  five  largest  e-businesses  in  the 
world,  rely  on  NetScaler  to  dramatically  accel¬ 
erate  application  performance.  All  without 
adding  servers,  bandwidth,  or  consultants. 
Perhaps  that’s  why 
NetScaler  is  rated  #1 
in  customer  satisfac¬ 
tion  among  Layer  4-7 
networking  vendors. 

See  what  NetScaler 
can  do  for  you  at 
www.netscaler.com/5x 


‘Percent  of  customers  who  gave 
vendor  5-out-of-5  rating  for 
overall  customer  satisfaction. 
Frost  &  Sullivan,  May  2005. 


©  2005  NetScaler.  Inc.  All  trademarks  are  the  properties  of  their  respective  owners. 


#1  in  Customer  Si 

itisfaction* 

76° 

_ _ 

| 36 

NetScaler  Ciscc 

>  F5 

10 

I  NetworkWorld 

5/23/05 

lews 

www.networkworld.com 

Convergence  legacy 

The  state  of  Illinois  is  using  a  Layer  2/3  MPLS  infrastructure  to  converge  statewide  IP 
and  frame  relay  networks,  and  support  legacy  protocols. 


O  Layer  3  VPNs  are  used  to  separate  !P  ©  A  frame  relay-over-MPLS  PVC  allows  the  ©  Separate  PVCs  fan  out  to  their  respective  IP 
traffic  for  each  state  agency.  state  to  support  non-routable  legacy  and  SNA  data  centers. 

protocols,  such  as  SNA,  IPX  and  DECnet 
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continued  from  page  1 

ATM  to  IP  backbones,  a  number 
of  companies  are  finding  that 
they  too,  can  use  MPLS  to  transi¬ 
tion  their  networks. 

The  Securities  Industry  Auto¬ 
mation  Corporation  (SIAC),  for 
example,  is  implementing  MPLS 
VPNs  as  the  basis  of  its  Secure 
Financial  Transaction  Infrastruct¬ 
ure  (SFTl),a  network  constructed 
after  Sept.  11,  2001,  to  provide  a 
bulletproof  Ethernet  access  infra¬ 
structure  for  the  New  York  Stock 
Exchange,  the  American  Stock 
Exchange  and  other  financial 
institutions. 

SFT1  supports  more  than  600 
customers,  each  with  multiple 
interfaces  into  the  network.  The 
backbone  spans  nine  access  cen¬ 
ters  in  six  U.S.  cities,  and  cus¬ 
tomers  must  connect  to  at  least 
two  access  centers  using  100M 
and  1G  bit/sec  Ethernet. 

Customers  connect  via  an  IEEE 
802.  lq  Ethernet  virtual  LAN  tag 
port  to  an  SFTI  edge  router  and 
then  that  VLAN  is  mapped  into  an 
MPLS  VPN  tunnel.The  tunnel  car¬ 
ries  the  customer  connection  to 
the  SFTI  service  edge  router, 
which  connects  the  customer  to 
the  service  network  that  corre¬ 
sponds  with  the  VPN  tunnel  and 
VLAN  tag  ID. 

MPLS  helps  segment  and 
secure  customer  traffic. 

“We  guarantee  that  if  you  con¬ 
nect  to  SFTI  directly  we’re  going 
to  give  you  robust  connections  to 
the  services  of  NYSE  and  AMEX, 
but  if  you  go  through  another  ser¬ 
vice  provider  we  can’t  make  that 
guarantee,”  said  Renzo  Silva,  tech¬ 
nical  director  for  network  and 
firewall  management  at  SIAC. 

One  particular  challenge  is  in 


provisioning  service,  he  says. 

“It’s  a  moving  target  for  us  be¬ 
cause  every  time  we  provide  a 
new  service  we  have  to  map  that 
service  into  an  MPLS  VPN,”  Silva 
said.“That  provides  new  complex¬ 
ity  as  far  as  [how]  the  customer 
needs  to  be  configured,  [how]  the 
data  center  needs  to  be  config¬ 
ured,  and  how  that  can  be  coordi¬ 
nated  and  correlated  to  make  it 
an  easy-to-understand  service  for 
our  operators  to  provision.” 

MPLS  reduced  complexity  for 
the  state  of  Illinois.The  state’s  De¬ 
partment  of  Central  Manage¬ 
ment  Services  consolidated  two 
statewide  networks  into  one  via 
a  Layer  2/3  approach  that  also 
enabled  support  for  legacy  pro¬ 
tocols  such  as  SNA,  IPX  and 
DECnet. 

One  of  those  networks  was  the 
Illinois  Century  Network  (ICN),  a 
statewide  IP/MPLS  packet-over- 
SONET  infrastructure  that  pro¬ 


vides  service  to  K-12  schools, high¬ 
er-education  institutions,  muni¬ 
cipalities,  museums  and  libraries. 
The  network  connects  6,100  sites 
and  2  million  users,  and  costs  $25 
million  per  year  to  maintain. 

The  state’s  government  net¬ 
work  was  a  private  frame  relay 
hub-and-spoke  net  connecting 
42  agencies  to  a  common  set  of 
data  centers  over  1,800  circuits 
at  a  cost  of  $12  million  per  year. 
Budget  constraints  forced  the 
consolidation  of  the  two  net¬ 
works  last  year,  said  Mike 
Bernico,  senior  network  engi¬ 
neer  for  the  department. 

A  fully  meshed  MPLS-based 
RFC  2547  Layer  3  VPN  enabled 
Illinois  to  collapse  both  networks 
yet  maintain  traffic  separation 
between  agencies  by  replacing 
frame  permanent  virtual  circuits 
(PVC)  with  MPLS  label  switched 
paths,  Bernico  said. 

“A  few  larger  agencies  had  as 
many  as  600  PVCs  resulting  in 
provisioning  nightmares  and 
very  complex  traffic  patterns,”  he 
said.“Layer  3  VPNs  allowed  us  to 
remove  the  complexity  of  hun¬ 
dreds  of  PVCs  in  a  very  low- 
impact  way!’ 

To  support  sites  with  non- 
routable  legacy  traffic,  Illinois 
opted  for  Layer  2  frame  relay- 
over-MPLS  VPNs.  This  keeps  SNA, 
IPX  and  DECnet  in  its  frame  relay 
PVC,  which  then  is  carried  inside 
an  MPLS  label  switched  path. 

“We  wanted  2547  for  the  long 
term,  but  we  needed  frame-over- 
MPLS  to  carry  the  things  we 
couldn’t  route,”  Bernico  said.  “It 
gave  us  the  ability  to  move  net¬ 
works  with  legacy  traffic  fast." 

One  of  the  challenges  with  the 
new  network  was  getting  opera¬ 
tions  staff  used  to  working  with¬ 
in  an  MPLS  VPN  context,  which 


uses  VPN  routing/forwarding 
instances  (VRF)  to  define  the 
VPN  membership  of  a  customer 
site.  A  customer  site’s  VRF  con¬ 
tains  all  the  routes  available  to 
the  site  from  the  VPNs  of  which 
it  is  a  member. 

“Separate  routing  tables  means 
a  new  paradigm  to  learn  for 
operations  personnel,”  Bernico 
said.  “You  have  to  make  sure 
operations  personnel  under¬ 
stand  and  have  practiced  trou¬ 
bleshooting  a  connection  inside 
a  VRF  [They]  don’t  need  to 
understand  everything  about 
MPLS,  but  they  need  to  know 
how  to  do  their  normal  job 
inside  a  VRF  context.” 

MPLS  is  not  for  everyone.  The 
touted  benefits  of  convergence, 
data  center  virtualization,  flexi¬ 
ble  bandwidth  and  cost  savings 
depend  on  a  company’s  size, 
needs  and  budget.  Those  bene¬ 
fits  could  be  offset  by  the  need 
to  familiarize  staff  with  a  new 
way  of  doing  things  and  an  im¬ 
plementation  that  might  take 
more  time  than  expected  to  get 
off  the  ground. 

“When  you’re  looking  at  an  en¬ 
terprise  MPLS  implementation 
you  have  to  ask  yourself, ‘are  you 
doing  this  because  it’s  strategic 
in  nature  or  are  you  reacting  to 
what  carriers  are  telling  you  you 
should  be  doing?’”  said  Ken 
Owens,  senior  architect  at  finan¬ 
cial  firm  AG  Edwards.  “It’s  not 
easy.  It’s  not  just  ‘Boom,’  plug-and- 
pla>f ■ 


■  Read  more  on  MPLS  in 
our  New  Data  Center  sup 
plement.  PAGE  S1Q 
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Chip  vendor  unites 
WLAN,  VoIP  techs 

■  BY  JOHN  COX 

Circuit  and  chip  designer  SyChip  this  week  will  announce  a  module 
that  will  let  vendors  offer  dual-mode  phones  that  can  use  a  cellular  net¬ 
work  or,  with  VoIRa  wireless  LAN  to  make  voice  or  data  calls. 

The  VWLAN7 100  VoIP  Module  combines  an  802.1  Ig  WLAN  adapter 
with  a  VoIP  processor  and  is  targeted  at  manufacturers  of  cell  phones, 
smart  phones,  and  PDA/phones  such  as  palmOne’sTreo. 

ABI  Research  a  few  weeks  ago  predicted  that  such  dual-mode 
mobile  phones  would  reach  100  million  by  2010.1n-$tat  Principal  ana¬ 
lyst  Allen  Nogee  is  even  more  optimistic:  He  predicts  136  million 
mobile  chipsets  for  cellular  and  WLAN  connectivity  by  that  same  date. 
Companies  such  as  Nokia  and  Siemens  have  already  begun  selling 
such  devices,  and  dozens  more  are  expected  to  do  so  by  year-end. 

SyChip  is  one  of  the  first  to  offer  an  802.1  lg  interface  for  integrated 

See  SyChip,  page  13 
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Start-up  touts  on-demand  resources 


■  BY  JENNIFER  MEARS 

A  handful  of  former  Nortel  executives 
have  launched  a  company  they  say  com¬ 
bines  telecom-class  networking  with  high- 
performance  computing  to  create  a  near¬ 
ly  unlimited  pool  of  server  resources  that 
can  grow  and  shrink  in  response  to  appli¬ 
cation  demands. 

Called  Liquid  Computing,  the  company  is 
making  a  modular-server  system  that  uses 
a  high-bandwidth  fiber  interconnect  to  let 
users  shift  workloads  and  reconfigure  sys¬ 
tems  on  demand.The  company  is  targeting 
high-performance  computing  customers 
in  areas  such  as  biosciences  and  govern- 
ment.The  trials  are  scheduled  to  begin  this 
summer.The  offering  is  expected  to  be  gen¬ 
erally  available  next  year. 

The  system  is  made  up  of  a  36.75-inch- 
high  chassis  that  holds  20  modules,  includ¬ 
ing  four  dual-core  Advanced  Micro 
Devices  Opteron  processors,  memory  and 
I/O,  and  plugs  into  a  common  midplane. 
Multiple  chassis  can  be  tied  together  via 
fiber-optic  cables,  and  the  initial  release 


will  scale  to  12  chassis,  or  960  processors, 
says  Brian  Hurley  Liquid  Computing’s  CEO. 

The  interconnect  is  Liquid  Computing’s 
key  feature.  It  is  a  combination  of  com¬ 
modity  components  and  proprietary 
devices  that  enable  fiber-optic  lines  to  have 
latency  of  “less  than  2  microseconds  from 


Alan  Freedman 

Research  manager,  I  DC 

processor  to  processor”  and  throughput  of 
up  to  6G  byte/sec,  Hurley  says.  He  stresses 
that  the  proprietary  nature  of  the  intercon¬ 
nect  is  “transparent”  to  applications.  “It’s  all 
standard  interfaces,”  he  says. 

“With  a  simple  software  command,  we 
can  configure  the  processors  to  look  like  a 
bunch  of  two-ways,  a  bunch  of  four-ways,  a 


bunch  of  eight-ways,  with  any  combination 
of  memory  and  I/O  that’s  required  by  the 
application  at  that  point,”  Hurley  says. 

Analysts  say  the  idea  is  similar  to  blade 
servers  but  takes  things  a  step  further. 

“They’re  including  things  such  as  broad¬ 
band  connectivity  as  well  as  a  little  bit 


more  advanced  networking  capabilities 
than  your  run-of-the-mill  server  blade,”  says 
Alan  Freedman,  research  manager  of  infra¬ 
structure  hardware  at  IDC. 

DigitalGlobe,  a  multimedia  firm  that  sells 
high-resolution  satellite  images  of  Earth, 
says  Liquid  Computing  will  enable  it  to  get 
more  efficient  use  of  data  center  resources. 


Today  the  Longmont,  Colo.,  company  has 
idle  hardware  standing  by  to  provide  the 
huge  amount  of  computing  power  it  needs 
for  just  10  or  15  minutes  every  hour  and  a 
half  —  the  time  it  takes  for  its  satellite  to  cir¬ 
cle  the  Earth. 

“That’s  what  is  so  attractive  about  the 
Liquid  system:  First  of  all,  to  have  that  many 
processors  in  a  single  form  or  single  plat¬ 
form  and  then  to  be  able  to  dynamically 
allocate  them  to  where  the  business  needs 
them  and  then  reallocate  them  to  different 
tasks,” says  Mark  Hargrove,  senior  vice  presi¬ 
dent  of  operations  and  CIO  of  DigitalGlobe. 

The  challenge  for  Liquid  Computing  will 
be  convincing  customers  that  what  it  is 
offering  is  better  than  grid  or  clustering 
products  that  major  systems  vendors  such 
as  IBM,  HPSun  and  SGI  offer, analysts  say 

“They  have  to  differentiate  themselves 
from  the  major  server  vendors  and  net¬ 
working  companies,  and  show  there  is  a 
difference  and  that  people  don’t  need  to 
buy  disparate  parts  for  the  function  they 
can  provide  in  their  integrated  product 
offering,”  Freedman  says.  ■ 


1 1  They're  including  things  such  as  broadband  connec¬ 
tivity,  as  well  as  a  little  bit  more  advanced  networking 
capabilities  than  your  run-of-the-mill  server  blade.  9  9 
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ESnet  turns  to  high-speed  optical  MANs 


■  BY  CAROLYN  DUFFY 
MARSAN 

GERMANTOWN,  MD.  — 

The  Energy  Sciences  Net¬ 
work  is  adding  10G  Ethernet 
metropolitan-area  networks 
in  key  U.S.  cities  in  a  move 
that  could  increase  commer¬ 
cial  development  of  this 
emerging  technology 

ESnet  is  one  of  the  fastest 
IP  networks  in  the  world  and 
ranks  with  the  university 
community’s  Internet2  and 
the  U.S.  Defense  Depart¬ 
ment’s  Research  and  Engi¬ 
neering  Network  as  a  leader 
of  network  technology 

Run  by  the  U.S.  Department 
of  Energy,  ESnet  supports 
thousands  of  government, 
industry  and  university  sci¬ 
entists  who  conduct  experi¬ 
ments  in  areas  such  as  high- 
energy  physics,  human  ge¬ 
nomics  and  climate  model¬ 
ing.  Scientists  use  ESnet  to 
transmit  massive  data  files, 
access  remote  computing 
and  data  resources,  and  collaborate  in  real  time. 

“ESnet  is  the  most  advanced  civilian  network  that  we 
support,”  says  Jim  Payne,  senior  vice  president  and  gen¬ 
eral  manager  of  Qwest  Government  Services  Division, 
which  provides  ESnet’s  nationwide  backbone,  as  well 
as  its  first  MAN.  “We’re  always  testing  the  next-genera¬ 
tion  technology  with  them.” 

ESnet  is  a  nationwide  IP  backbone  linking  the 
Department  of  Energy’s  headquarters  in  Germantown 
with  more  than  40  sites,  including  Oak  Ridge  National 
Laboratories  in  Tennessee,  Argonne  National  Labor¬ 
atory  outside  Chicago,  Los  Alamos  National  Labora¬ 
tories  in  New  Mexico  and  Lawrence  Berkeley  National 
Laboratory  in  California. 

Qwest  has  provided  ESnet  backbone  services  since 
1999,  when  it  won  an  eight-year  contract  worth  an  esti¬ 
mated  $87.5  million.  ESnet’s  ring-shaped  backbone  net¬ 
work  operates  at  10G  bit/sec  in  northern  states  and 
2.5G  bit/sec  in  southern  states. 

Starting  in  the  San  Francisco  area,  ESnet  is  adding  a 
fully  managed  MAN  with  dual  10G  bit/sec  Ethernet 
rings.  By  2008,  the  San  Francisco  MAN  is  expected  to 
support  more  than  100G  bit/sec  as  lambdas  are  added. 

Qwest  is  building  the  San  Francisco  MAN  under  a  five- 
year,  $4.4  million  contract  awarded  in  March.This  MAN, 
which  will  link  six  sites  in  the  region,  is  scheduled  to  be 
operational  by  September. 

“The  system  that  we’re  putting  in  place  is  a  fully  wave- 
length-provisionable  network  ring  that  we  can  add 
capacity  to,”  says  Wes  Kaplow,  CTO  for  Qwest  Govern¬ 
ment  Services  Division.  “They’re  starting  with  a  ring 
structure  with  20G  bit/sec,  but  they  have  options  to  go 
up  to  40  or  80G  bit/sec.  We  expect  that  like  the  rest  of 
the  network  this  MAN  will  growl’ 


The  Energy  Sciences  Network 


Already  one  of  the  fastest  IP  infrastructures  in  the  world,  this  U.S.  Department  of  Energy 
network  is  gaining  speed  via  new  metropolitan-area  networks.  The  first,  in  San  Francisco, 
will  be  lit  with  dual  10G  bit/sec  Ethernet  rings. 
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The  Energy  Department  plans  to  build  similar  MANs  in 
Chicago  and  New  York  later  this  year.  Department  of 
Energy  labs  in  Virginia  and  New  Mexico  are  hooking 
into  optical  MANs  being  built  by  nearby  universities. 

The  high-speed  MANs  will  replace  a  hub-and-spoke- 
style  design  used  to  provide  access  to  the  backbone 
network.  ESnet  used  conventional  circuits  ranging  from 
622M  to  2.5G  bit/sec  for  the  local  links  to  the  backbone. 
Now  ESnet  is  replacing  these  circuits  with  lambdas  that 
can  be  provisioned  on  dark  fiber  MANs. 

The  Department  of  Energy’s  goal  is  to  provide  greater 
bandwidth  from  its  regional  sites  to  the  core  of  its  net¬ 
work,  as  well  as  to  improve  redundancy  by  offering  mul¬ 
tiple  paths  from  the  sites  to  the  ESnet  backbone. 

“The  science  community  has  said  very  clearly  that 
they  have  to  have  networks  that  don’t  have  single  points 
of  failure  if  they’re  going  to  have  real  science  experi¬ 
ments  deployed  in  the  network,”  says  William  Johnston, 
ESnet  program  manager  at  Lawrence  Berkeley  National 
Laboratory  As  far  as  bandwidth  is  concerned,  Depart¬ 
ment  of  Energy  scientists  say  that  within  five  years  “uni¬ 
formly  the  requirement  is  for  100G  bit/sec.” 

ESnet  officials  say  the  MAN  architecture  will  improve 
the  end-to-end  performance  that  users  experience 
when  sending  massive  files. 

“Our  users  demand  the  ability  to  transmit  huge  vol¬ 
umes  of  data  rapidly  and  in  big  chunks,”  says  Daniel 
Hitchcock,  a  senior  technical  adviser  at  the  Department 
of  Energy“lt’s  not  like  it’s  one  Web  page  at  a  time. They 
may  want  to  transmit  a  5-terabyte  file.” 

Qwest  officials  say  the  San  Francisco  area  MAN  being 
built  for  ESnet  could  be  the  highest-capacity  MAN  ever 
built  for  one  customer. 

“We  have  rings  of  this  capacity  where  we  are  the 


incumbent  local  carrier,  but 
this  is  the  biggest  MAN  we’ve 
ever  built  for  an  individual 
customer,”  Kaplow  says. 

ESnet’s  early  adoption  of 
10G  Ethernet  MAN  services  is 
important  because  of  its 
track  record  in  debugging 
emerging  technologies  for 
the  commercial  market.  For 
example,  ESnet  was  one  of 
the  first  customers  of  ATM  in 
the  early  1990s. 

“Sprint  believes  that  we 
actually  accelerated  the 
acceptance  of  ATM  by  a 
decade  by  being  willing  to 
put  it  out  there  and  help 
them  debug  this  technology 
and  make  this  stuff  actually 
function,”  Hitchcock  says. 
“Now  we’re  starting  to  debug 
how  you  do  optical  networks 
and  how  you  provision  opti¬ 
cal  networks  flexibly  so  you 
can  set  up  lambdas  from 
point  to  point.” 

With  its  MAN  rollout,  ESnet 
will  be  among  the  first  cus¬ 
tomers  to  integrate  regional 
and  long-distance  optical  links  operating  at  10G  bit/sec, 
which  is  the  highest  speed  possible  today  Once  these 
links  are  built,  ESnet  will  explore  how  best  to  dynami¬ 
cally  provision  optical  wavelengths  to  accommodate 
the  transmission  of  extremely  large  data  files. 

“We’re  exploring  some  things  for  the  future  where 
you’d  be  able  to  set  up  circuits  on  demand  or  even  a 
whole  wavelength  on  demand  for  extra  large  files,” 
Hitchcock  says.“You  can  do  it  now  if  you  want  to  set 
up  something  for  a  week  or  a  month.  But  we’re  trying 
to  figure  out  how  you  can  do  it  in  minutes.” 

The  ESnet  project  is  expected  to  benefit  Qwest  and 
Ciena,  which  are  providing  optical  Ethernet  switches 
for  the  San  Francisco  area  MAN.  Participants  in  the  pro¬ 
ject  will  get  operational  experience  integrating  10G 
Ethernet  MAN  services  with  a  10G  backbone  WAN. 

“The  ability  to  run  10G  Ethernet  services  —  all  of 
that’s  now  going  to  be  in  place.  We’ll  be  productizing 
that  capability’  Kaplow  says.  “The  experience  of  build¬ 
ing  private  networks  with  a  wavelength  infrastructure, 
all  the  block-and-tackle  stuff,  we’ll  be  able  to  take  that 
away  and  leverage  it  for  other  customers.” 

Ciena  sees  a  growing  market  for  the  metropolitan 
wavelength  division  multiplexing  platforms  that  will  be 
used  on  ESnet’s  San  Francisco  MAN. 

“The  ESnet  project  is  an  important  proof  point  of  the 
adoption  of  10G  Ethernet  technology  says  Jeff  Verrant, 
a  senior  engineer  with  Ciena.  “The  Department  of 
Energy  consistently  sets  the  stage  for  industry,  including 
the  enterprise  sector,  to  follow  its  lead  in  support  of 
emerging  applications  like  networked  high-perfor¬ 
mance  computing  for  modeling  and  simulation,  grid 
computing  and  data  replication.” 

See  ESnet,  page  14 
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3Com  to  upgrade  IP  PBX  software 


SyChip 

continued  from  page  10 


■  BY  PHIL  HOCHMUTH 

3Com  this  week  is  expected  to  release  an 
update  to  its  NBX  operating  system,  as  well 
as  four  IP  phones  aimed  at  deployments  as 
varied  as  a  CEO’s  office  and  a  warehouse 
loading  dock. 

Version  5.0  of  3Com’s  NBX  operating  sys¬ 
tem  introduces  more  automatic  call  dis¬ 
tributor  (ACD)  features  for  call  center 
applications,  which  in  the  past  had  to  be 
added  as  separate  software  products.  The 
software  also  supports  advanced  call  and 
message  features. 

The  new  software  lets  up  to  900  agents 
operate  off  of  a  3Com  NBX,  with  full  call- 
center  capabilities  such  as  call  queuing 
and  routing,  the  company  says.  Up  to  100 
call-center  management  stations  also  can 
be  deployed  with  the  software.  This  lets 
managers  listen  in  on  calls  taken  by  agents, 
interrupt  calls  for  training  purposes,  or 
“whisper”  into  a  call  —  where  the  agent 
can  hear  the  manager’s  voice  but  the  cus¬ 
tomer/caller  on  the  outside  line  cannot. 
Version  5.0  also  has  built-in  call  center 


reporting,  which  in  the  past  required  third- 
party  software  packages. 

The  built-in  ACD  functions  are  important 
to  Nixon,  a  maker  of  watches  and  apparel 
in  Augusta,  Ga  “It’s  attractive  to  have  a  lot  of 
base  ACD  functions  already  included  with¬ 
out  the  extra  cost,”  says  John  Roberts,  oper¬ 
ations  director  at  the  company  Nixon, 
which  beta-tested  the  5.0  NBX  software, 
can  better  manage  the  time  of  its  call  cen¬ 
ter  agents  with  the  reporting  tools,  he  says. 

Version  5.0  is  required  in  order  to  use  the 
four  new  phones.  Older  phones  also  will 
work  on  the  new  platform. 

Among  the  new  handsets  is  the  3Com 
3103  Manager  IP  phone,  which  includes  a 
large  LCD  display  for  viewing  directories  or 
call  logs.  It  also  has  a  built-in, two-port  Giga¬ 
bit  Ethernet  switch,  which  lets  a  user  con¬ 
nect  a  PC  via  Gigabit  Ethernet  to  the 
phone,  and  then  access  a  LAN  from  anoth¬ 
er  switch  port  in  the  phone  —  thus  requir¬ 
ing  only  one  network  cable  at  a  user’s  desk. 

Other  new  phones  include  the  3101,  an 
entry-level  model  with  minimal  features, 
and  two  cordless  IP  phones  that  let  users 


3Com's  3103  IP  phone  provides  a  large  LCD 
display  for  VoIP-related  applications. 

roam  up  to  1 ,000  feet  with  a  900-MHz  hand¬ 
set,  attached  to  a  base  unit  that  plugs  into 
an  Ethernet  link  and  AC  power  plug.  The 
3107C  cordless  phone  includes  a  speaker¬ 
phone  in  the  base  station. 

3Com’s  NBX  competes  with  products 
from  Avaya,  Cisco  and  others. 

The  NBX  5.0  software  costs  $1,000,  and 
the  phones  start  at  $100  for  the  3101  and 
$365  for  the  3103  Manager  phone.  The 
3016C  and  3107C  are  priced  at  $414  and 
$5 15,  respectively  ■ 


VoIP  calls.  SiGe  Semiconductor  earlier  this 
month  also  announced  an  802.1  lg/b  mod¬ 
ule  for  cellular  handsets.  Until  now,  other 
implementations  have  supported  802.11b, 
with  a  data  rate  of  11M  bit/sec  compared 
with  54M  bit/sec  for  802.1  lg.  Both  compa¬ 
nies  also  stress  their  products’  low  power 
consumption  and  power  management  fea¬ 
tures. 

There’s  a  lot  of  interest  in  SyChip’s 
approach.  Founded  in  2000  as  a  Lucent 
Technologies  Bell  Labs  spin-off,  the  com¬ 
pany  raised  $20  million  in  a  fourth  round 
of  financing  last  year,  for  a  total  of  $63  mil¬ 
lion.  While  big  silicon  vendors  such  as 
Broadcom  and  Texas  Instruments  are  tack¬ 
ling  this  same  area, SyChip’s  strongest  rivals 
also  might  be  new,  such  as  SiGe,  which 
takes  a  similar  approach  and  is  equally 
well  funded  with  nearly  $50  million  in  ven¬ 
ture  capital. 

The  7100  module  now  is  being  sampled 
with  a  few  key  SyChip  customers.  In  July 
the  module  will  be  available  in  larger 
quantities  for  general  sampling.  The  ven¬ 
dor  plans  to  ramp  up  to  large-scale  vol¬ 
umes  by  year-end.  ■ 
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mediterranean  exports 

Israeli  entrepreneurs  have  left  their  mark  on  a  growing 
list  of  technology  companies.  Here  is  a  sample: 

Public  companies 

AudioCodes:  Media  gateway,  server  and  processing  technologies 
BackWeb  Technologies:  Offline  and  mobile  Web  software 
Ceragon  Networks:  Broadband  wireless  devices  and  software 
Check  Point  Software  Technologies:  Security  software 
Jacada:  Legacy  integration  software 
Radware:  Network  traffic  management  technology 
RiT  Technologies:  Network  infrastructure  management  products 
VocalTec  Communications: Telecom  equipment 

Private  companies 

Blue  Security:  Anti-spam  and  anti-spyware  technology 
Breach  Security:  Application  security  appliances 
Cyber-Ark  Software:  Security  software 
Oecru:  Storage  security  appliances 
nLayers:  Application  discovery  and  mapping 
Oblicore:  Service-level  management  software 
OpTier:  Workload  management  software 
Quarry  Technologies:  Carrier-class  security  products 


Israel 

continued  from  page  1 

accelerated  his  technology  and 
management  experience,  says 
Cohen,  who  co-founded  analytic 
software  maker  Vigil  Technologies 
in  1998,  and  security  risk  manage¬ 
ment  vendor  Skybox  Security  in 
2002.The  military  atmosphere  in 
Israel  supports  innovative  and 
independent  thinking  —  attribut¬ 
es  youd  expect  an  entrepreneur¬ 
ial  start-up  to  promote.“That  gives 
you  a  very  good  jump-start  later 
on,”  he  says. 

Cohen  isn’t  alone  in  parlaying 
his  military  experience  into  a 
high-tech  career.  Israel  is  known 
worldwide  as  a  breeding  ground 
for  entrepreneurs.  With  69  Israeli 
companies  listed  on  Nasdaq,  its 
second  only  to  Canada  in  the 
number  of  foreign  countries  on 
the  exchange.  Among  the  coun¬ 
try’s  more  recognizable  success 
stories  are  security  vendor  Check 
Point  Software  and  VoIP  pioneer 
VocalTec  Communications. 

In  concentration  of  new  tech¬ 
nology  companies,  Israel  most 
resembles  Silicon  Valley  says 
Adam  Fisher,  a  general  partner  at 
Jerusalem  Venture  Partners,  a 
venture  capital  firm  established 
12  years  ago  to  help  create  and 
fund  early-stage  companies  in 
Israel.Take  any  technology  start¬ 
up  in  the  US.,  and  odds  are  that 
one  of  its  competitors  is  an 
Israeli  company  he  says. 

One  reason  is  the  independent 
nature  and  penchant  for  risk  tak¬ 
ing  that  characterize  Israel’s  6.5 
million  people.“They’re  not  afraid 
to  fail  or  to  risk  suffering  to  create 


a  better  life,”  Fisher  says.'That  will¬ 
ingness  to  prove  themselves  over 
and  over  again  is  what  created 
the  environment  today’ 

Israelis  have  learned  to  create 
opportunities  without  dwelling 
on  potentially  bad  outcomes, 
adds  Philippe  Szwarc,  CEO  of 
Arel  Communications  and  Soft¬ 
ware,  a  videoconferencing  plat¬ 
form  vendor  founded  in  Israel. 

“When  you’re  fighting  in  war  sit¬ 
uations  on  a  daily  basis  in  the 
Israeli  military  you  can’t  think 
‘What  will  happen  if  I  die?’You 
don’t  think  about  the  negative 
that  could  happen  because  not 
doing  anything  is  an  even  worse 
risk,”  says  Szwarc,  who  was  born 
in  France,  emigrated  to  Israel 
when  at  18,  and  spent  four-and-a- 
half  years  in  the  Israeli  navy 

There  to  assist  Israeli  visionaries 
with  big  ideas  are  venture  capi¬ 
talists  with  investment  dollars. 

Israeli  venture  capital  funds 
raised  $724  million  in  2004  —  up 
from  $14  million  in  2003,  but  still 
below  the  $3.7  billion  raised  in 
2000,  according  to  IVC  Research 
Center. Today  about  $1  billion  in 
capital  is  available  for  investment, 
and  the  research  firm  expects 
Israeli  venture  capitalists  to  raise 
$1.5  billion  more  in  2005. 

Benchmark  Capital,  one  of  the 
U.S.  venture  capital  firms  that 
have  set  up  shop  in  Israel,  earlier 
this  month  announced  the  cre¬ 
ation  of  a  $250  million  fund  ear¬ 
marked  for  early-stage  technol¬ 
ogy  companies  in  Israel. 

Benchmark  established  an 
office  in  Israel  four  years  ago,  rec¬ 
ognizing  that  the  Israeli  high-tech 
industry  at  that  time  had 


matured  to  a  level  where  it  could 
be  viewed  as  a  logical  extension 
of  Silicon  Valley  says  Nachman 
Shelef,  a  general  partner  in  the 
firm’s  Israel  office.“Israel  is  so 
similar  to  Silicon  Valley  that  you 
can  take  a  company  in  Israel, 
treat  it  the  same  way  as  a  start-up 
in  Silicon  Valley  with  the  same 
kind  of  support,  and  have  the 
same  expectations  of  success,” 
Shelef  says.“In  every  way  except 
as  a  market,  Israel  is  a  major 
global  high-tech  center!’ 

One  major  obstacle  Israeli  start¬ 
ups  have  to  contend  with  is  the 
lack  of  local  buyers  —  every  sale 
is  abroad,  Fisher  says.  On  the  pos¬ 
itive  side,  vendors  from  the  start 
adopt  a  global  perspective  and 
are  trained  to  look  not  just  down 
the  road,  but  across  the  ocean  for 
customers.  In  an  increasingly 
global  market,  that  mind-set  is  an 
asset,  Fisher  says. 

Military  savvy 

While  Israel  doesn’t  have  scores 
of  local  corporate  buyers  to  help 
sustain  its  start-ups,  it  does  have 
one  power  technology  con¬ 
sumer:  the  military 

Israel’s  defense  industry  has 
had  to  use  the  most  advanced 
technology  available  to  make  up 
for  what  it  lacks  in  size  and 
human  resources,  says  Shelef, 
who  began  his  career  developing 
communications  systems  in  the 
Israeli  Defense  Force  between 
1977  and  1985. 

While  the  U.S.  government  pro¬ 
cures  much  of  its  technology 


from  commercial  providers, 

Israel  tends  to  develop  its  own. 

As  a  result,  young  Israeli  adults 
—  who  are  subject  to  compulso¬ 
ry  military  service  —  can  be¬ 
come  involved  in  significant  IT 
development  projects  during  the 
time  they  spend  in  the  military 

“You  get  to  work  on  advanced 
projects  in  an  environment 
where  there  is  not  a  lot  of  man¬ 
agement  in  place  —  you  get  to 
do  it,  to  a  certain  extent,  indepen¬ 
dently  which  helps  people  think 
independently”  in  the  outside 
world,  Shelef  says.  However,  it’s  a 
rare  case  when  technology  de¬ 
veloped  in  the  Israeli  military 
becomes  the  basis  for  a  commer¬ 
cial  start-up,  he  says. 

There  have  been  start-ups  born 
out  of  technology  developed  in 
the  Israeli  military  —  for  exam¬ 
ple,  the  JVP-backed  optical  com¬ 
ponent  company  CyOptics  and 
security  vendor  Cyber-Ark  Soft¬ 
ware,  Fisher  says.  But  more  often 
the  value  of  military  service  is  the 
experience  gained,  Fisher  agrees. 

Military  service  spawns  net¬ 
working  opportunities,  too,  Fisher 
says.  Entrepreneurs  often  look  up 
former  military  colleagues  when 
they  need  experts,“lsrael’s  small 
size  definitely  lends  itself  to 
building  companies,”  Fisher  says. 
“Everybody  knows  everybody. 
There’s  no  need  for  headhunters 
in  most  situations.” 

The  military  also  helps  cultivate 
salesmanship,  Szwarc  says. 

During  his  years  of  service,  com¬ 
puters  were  much  less  prevalent 


than  they  are  today“so  we  had  to 
make  a  lot  of  sales  pitches  to 
convince  people  it  was  the  way 
to  go,”  he  says. 

Government  assistance 

Culture  and  military  service  are 
two  of  the  pillars  that  created 
Israel’s  high-tech  industry  but 
they  aren’t  the  only  influences, 
Fisher  says.  The  presence  of  mul¬ 
tinational  vendors  such  as  IBM, 
Intel  and  Motorola,  beginning  as 
early  as  the  1970s,  helped  put 
Israel  on  the  technology  map. 

“Some  of  these  companies’ 
largest  R&D  centers  outside  of 
the  U.S.  are  in  Israel,”  Fisher  says. 
“What  that’s  done  is  build  up  a 
generation  of  technology  man¬ 
agers  —  not  just  people  who  can 
develop  but  people  who  know 
how  to  manage  technology  and 
deliver  according  to  internation¬ 
al  standards.” 

The  Israeli  government,  too,  has 
played  a  role  in  fostering  the 
country’s  high-tech  savvy  with 
incentives  aimed  at  helping 
young  companies  get  established. 

The  Office  of  the  Chief  Scientist 
within  Israel’s  Ministry  of  Industry 
Trade  &  Labor  runs  programs  to 
encourage  industrial  R&D. 

Among  the  initiatives  are  23  tech¬ 
nology  incubators  designed  to 
help  nascent  companies  develop 
ideas,  form  new  business  ven¬ 
tures  and  attract  private  investors. 
There’s  also  an  R&D  fund  that 
gives  grants  to  companies  to  sup¬ 
port  project  development  in 
return  for  a  royalty  payment  of 
3%  to  5%  of  future  product  sales. 

Israel  has  come  a  long  way 
toward  adopting  a  more  open 
economy  but  it  hasn’t  always 
been  as  receptive  to  entrepre- 
neurialism  as  it  is  today  Szwarc 
says.“When  I  first  came  to  Israel 
in  ’82,  there  was  one  brand  of 
chocolate,  and  one  brand  of  cof¬ 
fee,  and  a  lot  of  companies  were 
government-controlled.  It’s  been 
a  huge  evolution,  and  it’s  come 
pretty  far  and  pretty  fast,”  he  says. 
“The  successive  governments 
have  understood  that  high-tech 
was  what  the  country  needed." 

Looking  ahead,  a  challenge  for 
Israeli  start-ups  is  sustaining  cor¬ 
porate  growth.  Israelis  are  eager 
to  get  ahead  and  do  things  by 
themselves,  Shelef  says.'They 
don’t  like  working  for  anyone. 
They  want  to  be  their  own  boss.” 
This  bodes  well  for  entrepre- 
neurialism  but  makes  it  hard  to 
grow  a  company  Shelef  says. 

“It’s  a  great  place  to  innovate, 
but  it  can  be  difficult  to  sustain 
that  effort,”  he  says.'That’s  the 
next  challenge  for  the  Israeli 
high-tech  industry!’  ■ 
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Today  the  market  for  10G  Ethernet  MAN  services  is  “minuscule 
compared  to  the  rest  of  the  Ethernet  market,”  says  Brian  Van 
Steen,  senior  analyst  with  research  firm  RHK. “We’re  still  talking 
about  very  few  circuits  today,  but  many  service  providers  are 
expecting  demand  for  10G  Ethernet  MAN  services  to  grow” 

Van  Steen  expects  government  agencies,  financial  services 
firms  and  popular  Web  sites  such  as  Yahoo  or  Google  to  be 
among  the  first  customers  of  10G  Ethernet  MAN  services.“These 
customers  have  all  that  data,  and  they  have  storage  requirements 
and  disaster  recovery  requirements,”  he  says.“For  Qwest,  building 
a  10G  Ethernet  ring  for  the  Energy  Department  definitely  will  give 
them  a  lot  of  experience.” 

Industry  observers  expect  the  market  for  10G  Ethernet  MAN  ser¬ 
vices  to  start  to  take  off  between  now  and  2010. 

“This  architecture  is  going  to  be  what  any  large  organization 
that  requires  high  bandwidth  and  reliability  is  going  to  use,” 
Johnston  says.  “The  model  of  using  lit  dark  fiber  or  managed 
lambdas  from  a  service  provider  is  the  clear  wave  of  the  future 
for  people  who  have  large-scale  data  needs.”® 


: 


15 


News 


5/23/05 


NetworkWorld 


www.networkworld.com 


Microsoft  targets  small  retailers 


■  BY  ANN  BEDNARZ 

Microsoft  last  week  unveiled  point-of- 
sale  software  designed  to  help  small 
retailers  automate  sales,  inventory  and 
store  management  tasks. 

Sophisticated  POS  packages  typically 
are  too  complicated  and  expensive  for 
single-shop  retailers, says  Mike  Dickstein, 
director  of  POS  solutions  in  Microsoft’s 
Business  Solutions  division.  The  new 
Microsoft  Point  of  Sale  product  is  geared 
for  these  small  businesses  that  don’t 
require  server-based  systems,  he  says. 

Microsoft  POS  includes  tools  for  track¬ 
ing  and  managing  sales,  inventory  and 
customer  information.  The  software 
stores  customer  information  locally  on  a 
merchant’s  machine  so  salespeople  can 
view  customers’  previous  purchases  and 
preferences. 

Instead  of  manually  checking  the  racks 
to  see  available  inventory,  store  person¬ 
nel  can  see  inventory  details  right  at  the 
register.  Remote  access  options  let  store- 
owners  check  sales  and  employee  activ- 


Big  numbers 

As  many  as  3.8  million,  or  about 

45% 

of  the  8.6  million  U.S.  retail 
checkout  lanes,  are  sitting  in 
single-store  retailers'  shops, 
according  to  Microsoft. 


ity  from  a  home  PC. 

More  small  retailers  are  looking  for  PC- 
based  alternatives  to  electronic  registers 
and  manual  record-keeping  methods, 
analysts  say.  According  to  IHL  Consulting 
Group,  shipments  of  PC-based  POS  ter¬ 
minals  grew  12%  between  2003  and 
2004.  More  than  40%  of  single-store 
retailers  now  use  PC-based  technology, 
the  research  firm  says. 

Microsoft  POS  is  not  the  vendor’s  first 
foray  into  retail  sales  software.The  Micro¬ 


soft  Retail  Management  System  (Micro¬ 
soft  RMS)  suite  is  based  on  technology 
Microsoft  gained  in  its  2002  acquisition 
of  Sales  Management  Systems. 

It’s  designed  for  small  and  midsize  re¬ 
tailers  with  up  to  25  locations  and  in¬ 
cludes  support  for  more  advanced  tasks 
such  as  matrix  inventory,  which  is  a 
method  of  tracking  inventory  by  multiple 
attributes  such  as  size  and  color. 

“RMS  is  designed  for  a  retailer  with  mul¬ 
tiple  stores  who  wants  to  centrally  man¬ 
age  the  stores,  inventory,  transactions  and 
customer  information,”  Dickstein  says. 
POS  is  designed  for  a  single-store  retailer 
or  a  multi-store  retailer  that  independent¬ 
ly  manages  its  stores.  Microsoft  RMS  is  a 
server-based  system,  whereas  Microsoft 
POS  works  in  a  peer-to-peer  fashion  with 
other  systems  in  the  store,  he  adds. 

Another  difference  between  the  two 
products  is  application  connectivity. 
Microsoft  POS  is  compatible  with  Intuit’s 
QuickBooks  accounting  applications. 
Microsoft  RMS  works  with  a  broader 
range  of  low-level  accounting  programs 


and  higher  level  ERP  suites  such  as 
Microsoft’s  Great  Plains  software. 

“This  allows  [Microsoft  RMS]  to  scale  to 
a  midsize  retailer  who’s  using  a  full  ERP 
system.  Point  of  Sale  is  not  going  to  be 
used  by  a  retailer  that’s  large  enough  to 
have  an  ERP  system,”  Dickstein  says. 

A  single-checkout-lane  license  for  Micro¬ 
soft  POS  costs  $800,  as  compared  with 
$1,190  per  lane  for  Microsoft  RMS.M 
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his  morning  I  set  up  a  firewall  in  London, 
fought  a  server  attack  in  Tokyo  and 
rebooted  a  mail  server  in  New  York. 


Manage  your  data  center  from  anywhere... 

In  today's  pressure  filled  “uptime”  environment  where  a  few 
minutes  can  cost  you  big  dollars,  customer  confidence  and 
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Lantronix  gives  you  access  to  ALL  of  your  data  center  assets 
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More  breaking  news 


Microsoft  sells  ID  mgmt.  plan 
Proposal  calls  for  dent,  server  and 
development  tools  based  on  Web 
services  protocols., 

Enenjy  Ann  wins  network  .im.v  it 
PPL  Corp.  w  ns  Network  World’s  first  ever 
Renovator  Award  for  a  network  overhaul 
featuring  opt  cat  Ethernet  QoS  and  VoIP. 
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Criminals  increasingly  targe:  enterprises  wrth 
den.al-of-seivice  threats  in  efforts  to  extort 
money 
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Advanced  Reality's  collaboration  package  lets  multiple  users  view  Web  pages  with  one  browser. 


■  BY  JOHN  FONTANA 

Advanced  Reality  this  week  is  upgrading 
its  browser-based  collaboration  package 
with  features  for  letting  customers  integrate 
document  sharing,  VoIR  e-mail  and  instant 
messaging  systems. 

The  Jybe  2.0  Server  works  in  tandem  with 
the  Jybe  2.0  client,  which  can  be  down¬ 
loaded  for  free  and  plugs  into  Internet 
Explorer  and  Firefox.  The  client  adds  two 
buttons  for  inviting  end  users  and  sharing 
documents. 

The  server  features  a  conversion  technol¬ 
ogy  that  can  transform  PowerPoint,  Excel 
and  Word  documents  into  HTML  so  users 
can  share  them  using  only  a  browser.  The 
server  also  works  with  corporate  directories 
to  support  access  control.  The  Jybe  2.0 
client  integrates  with  Microsoft  Outlook’s 
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address  book  and  buddy  lists  from  IM 
clients  so  end  users  can  find  colleagues  for 
collaboration  sessions.  Jybe  also  integrates 
with  Skype,aVoIP  desktop  client. 

The  Jybe  software  is  designed  to  provide 
users  with  a  straightforward  collaboration 
environment  based  on  client  software 
already  on  corporate  desktops.  The  Jybe 
client  software,  which  is  less  than  1M  byte, 
must  be  downloaded  but  is  the  only  brows¬ 
er  modification  required. 

Northern  Illinois  University  (NIU)  uses 
Jybe  to  support  a  virtual  research  service, 
where  users  can  chat  with  a  librarian  who 
can  direct  them  to  resources  during  a 
shared  browser  session. 

“This  has  been  so  easy  to  set  up  and  so 
easy  to  use,”  says  TJ  Lusher,  assistant  dean  of 
automated  library  systems  at  NIU  in 
DeKalb.“The  server  software  takes  so  little 
bandwidth  you  don’t  even  know  it  is  run¬ 
ning,”  says  Lusher,  who  hopes  to  have  5,000 
users  by  year-end. 

Jybe  lets  multiple  users  view  one  URL  at 
the  same  time. The  URL  can  be  a  Web  page 
or  part  of  a  Web-based  application.  A  secu¬ 
rity  mechanism  prevents  users  from  sharing 
password-protected  Web  pages  or  applica¬ 
tions  unless  each  user  has  his  password. 

With  Jybe,  users  don’t  share  screens. They 
share  only  the  small  bit  of  data  contained 
in  a  URL,  and  that  saves  bandwidth. 

The  new  server  software  also  lets  compa¬ 
nies  set  up  their  own  internal  collaboration 
platforms  without  having  to  go  through  a 
Jybe  server  run  by  Advanced  Reality 


The  server  also  adds  a  number  of  features, 
including  designating  a  session  leader  who 
can  activate  certain  collaboration  features 
for  session  participants,  the  ability  for  all 
users  in  a  collaboration  session  to  see  what 
other  users  type  into  form  fields,  a  co¬ 
scrolling  feature  that  keeps  every  user  at  the 
same  place  on  a  Web  page,  and  a  button  to 
send  invitations  to  collaboration  sessions 
via  email.  Advanced  Reality  will  eventually 


extend  the  invitation  feature  to  IM,  accord¬ 
ing  to  company  officials. 

Jybe  compares  with  resource  sharing  ser¬ 
vices  from  Web  conferencing  providers 
WebEx  and  Microsoft,  and  competes  with 
products  from  vendors  such  as  Docutek. 

The  Jybe  server  runs  on  Windows  2000 
and  2003,  and  the  .Net  Framework.The  serv¬ 
er  is  priced  between  $5,000  and  $10,000, 
depending  on  configuration.* 


Backed  by  an  80-year  history  of  trusted 
reliability,  Tripp  Lite  offers  a  complete  line  of 
reliable  power  protection  solutions  to  shield 
computers,  servers,  hubs  and  other  equipment 
from  all  power  problems.  Tripp  Lite  products 
provide  a  full  range  of  premium  features  that 
allow  you  to  customize  your  protection  solution 
to  suit  your  specific  needs.  Best  of  all,  Tripp  Lite 
products  are  typically  priced  lower  than 
comparable  competitive  models! 


UPS  Systems 

A  full  line  of  award-winning  models  with  standby, 
line-interactive  or  on-line  operation.  300VA  to 
30kVA  capacities. 


Surge  Suppressors 

Protect  AC,  modem/fax,  Ethernet  and  coaxial 
lines  with  over  60  models.  Up  to  12  outlets 
available. 


Cables  &  KVM  Switches 

A  wide  selection  of  cables  and  connectivity 
products  for  every  application,  including  KVM 
switches  with  up  to  32-ports. 


NEW  PRODUCTS! 


3-Phase 
UPS  Systems 

Feature  true  on-line 
operation  and  3-phase 
input  and  output. 


Tripp  Lite  World  Headquarters  •  1111  West  35th  Street,  Chicago,  IL  60609  •  Tel:  773.869.1234  •  www.tripplite.com 


32-Port  Matrix 
KVM  Switch 

Delivers  superior  server 
control  by  up  to  four 
independent  users. 

4-Port  USB  2.0 
Ultra-Mini  Hub 

Links  multiple  devices 
to  one  computer. 


Ah  trademarks  are 
the  property  of  their 
respective  owners. 


NEW  AND  IMPROVED 
UPS  SELECTOR  GUIDE! 

Find  the  perfect  UPS  solution  quickly  and  easily 
with  Tripp  Lite's  updated  UPS  Selector  Guide. 

visit:  www.tripplite.com/nww2 
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No  matter  what  you  need  in  technology,  you  can  count  on  CDW.  Our  account  managers  and  product  specialists  can 
get  you  quick  answers  to  any  questions  you  might  have.  And  with  1000  top  brands  and  access  to  the  largest  in-stock 
inventories  in  the  industry,  you  can  be  sure  to  get  the  products  you  need  when  you  need  them.  So  give  us  a  call  and 
find  out  first  hand  how  we  make  it  happen.  Every  order,  every  call,  every  time. 
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The  Right  Technology.  Right  Away 

CDW.com  •  800.399.4CDW 
In  Canada,  call  800.387.21 73  •  CDW.ca 


■  VOIP  ■  WIRELESS  LANS 


Lessons  from  Leading  Users 


Telemedicine  helps  victims  of  stroke 


■  BY  JASON  MESERVE 

A  Massachusetts  company  is  looking  to 
use  videoconferencing  technology 
to  extend  critical  care  to  stroke 
patients  in  rural  hospitals. 

Brain  Saving  Technologies  (BST)  of 
Wellesley  is  working  with  UMass  Medical 
Center  in  Worcester  and  three  of  its  affili¬ 
ates  to  put  video  endpoints  and  dedicat¬ 
ed  Internet  access  in  each  location,  which 
will  let  neurologists  in  Worcester  consult 
with  emergency  room  doctors  and 
patients  at  the  remote  sites.  The  impetus 
behind  the  move  is  a  Massachusetts  law 
that  requires  emergency  medical  techni¬ 
cians  to  bring  patients  exhibiting  signs  of 
a  stroke  to  a  hospital  that  has  a  neurolo¬ 
gist  on  staff  24  hours  a  day,  bypassing 
nearby  hospitals  that  might  not  meet  the 
requirement.  Similar  laws  are  on  the 
books  in  New  Jersey  and  Florida,  with 
more  pending  in  other  states. 

With  BST’s  system,  stroke  patients  can  be 
brought  to  participating  member  hospi¬ 
tals,  where  a  Tandberg  Intern  II  portable 
videoconferencing  unit  connects  the  ER 
physician  and  patient  with  a  dedicated 
neurologist  at  UMass  Medical. 


The  neurologist  sits  in  a  room  with  a 
Tandberg  1500  or  3000  endpoint  and  two 
screens,  one  to  see  the  patient  and  one  to 
view  the  CAT  scan  of  the  patient’s  head. 
There  are  two  endpoints  at  UMass  for  han¬ 
dling  multiple  calls  and  for  failover. 

“The  patient,  family,  ER  physician  and 
consulting  [neurologist]  all  feel  like 
they’re  in  the  same  room,”  says  Stuart 
Bernstein,  president  and  COO  of  BST.The 
patient  [if  conscious]  can  see  the  con¬ 
sulting  physician  and  ask  questions.” 

The  consulting  physician  has  far-end 
camera  control  and  can  pan,  tilt  and 
zoom  the  camera  on  the  Intern  II  to  get  a 
better  look  at  the  patient.  All  of  the  par¬ 
ticipating  hospitals  use  the  same  imag¬ 
ing  technology,  which  make  it  easier  to 
send  high-resolution  images  taken  at  the 
member  hospital  with  the  consulting 
neurologist.  The  images  also  can  be 
shared  in  the  videoconference  consulta¬ 
tion  using  Tandberg’s  DuoVideo  technol¬ 
ogy,  although  at  a  lower  resolution,  which 
lets  the  patient  and  family  see  the  area  of 
concern. 

When  stoke  occurs,  and  one  does  every 
45  seconds  in  the  U.S.,  according  to  the 

See  Telemedicine,  page  21 


Help  is  in  sight 


Brain  Saving  Technologies  (BST)  is  installing  videoconferencing  at  UMass 
Medical  Center  and  three  of  its  affiliates  to  help  more  quickly  handle 


victims  of  stroke. 


©Remote  consultant 


consulting  neurologist  and  family  with  the  remote  support  if  needed. 

consultant. 


■  Commodity  Ethernet  switch  maker 
SMC  earlier  this  month  announced 
its  first  10G  Ethernet  switch  —  the 
TigerSwitch  10G.  The  switch  is 
aimed  at  aggregating  10G  links  from 
wiring  closet  switches,  or  as  a  small 
backbone  device.  The  eight-port, 
fixed-configuration  box  can  support 
up  to  160G  bit/sec  of  bandwidth, 
allowing  all  ports  to  run  at  full-duplex 
10G  bit/sec.  The  Layer  2  switch  offers 
several  options  for  10G  optical  trans¬ 
ceivers,  or  physical  ports,  ranging 
from  150  feet  to  10  miles.  The  switch 
will  be  available  this  month  starting 
at  $8,000  for  the  switch,  with  optics 
ranging  from  $2,300  to  $9,000. 


Avaya  CEO  on  VoIP  issues 


Avaya  was  borne  out  of  AT&T/ 
Lucent's  legacy.  But  since  its  2000 
launch,  the  enterprise  telephony  ven¬ 
dor  has  tried  to  recast  itself  as  an 
enterprise  applications  company, 
with  a  focus  on  voice.  Recent  moves 
include  the  migration  of  Avaya  s 
legacy  PBX  to  a  Linux-based  server 
application,  and  the  introduction  of 
an  application  server  for  partners 
and  users  to  develop  VoIP-integrated  software  such  as 
applications  that  integrate  VoIP  and  messaging  with 
ERP  software,  Web  sites  or  portals.  Avaya  CEO  Donald 
Peterson  recently  discussed  the  company’s  evolution, 
as  well  as  current  trends  in  the  enterprise  VoIP  market, 


with  Network  World  Senior  Editor  Phil  Hochmuth. 

How  does  Avaya's  IT-  and  applications-approach  to  telephony  affect 
Avaya’s  partners,  customers  and  its  own  product  development9 

They’re  either  going  to  change  their  businesses  or  struggle 
with  the  evolution.That’s  not  a  new  story.There  is  still  a  TDM 
installed  base  that  needs  to  be  serviced,  and  there  will  be  a 
significant  revenue  opportunity  for  folks.  But  the  longer- 
term  value  opportunity  will  be  in  this  new  world.  By  creat¬ 
ing  our  own  application  server,  in  some  ways  we’re  trying  to 
give  an  advantage  to  people  who  have  written  code  for 
Avaya  telephony  products  in  the  past.  In  the  future,  we  will 
put  the  call  manager  and  communications  manager  into 
an  [IBM]  WebSphere-like  platform,  where  people  would 
write  their  applications.That  will  most  certainly  happen 
over  time. 

See  Peterson,  page  21 
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CONGRATULATIONS,  YOUR 


IT  security  is  more  vital  than  ever,  and  testing  is  the  only  way 
to  ensure  its  success.  With  Spirent  testing  solutions,  you  can  prevent 
security  breaches  and  protect  your  company’s  assets  by  testing  seem  it-, 
infrastructure  before  you  deploy  it.  Testing  early,  and  under  real-world  condition 
allows  you  to  properly  evaluate  IT  vendor  claims  and  determine  if  the  various 
.systems  and  devices  are  a- good,  fit  Tor  your  ehferprfse  network.  In,  fhe  coo, 
testing;  will  significantly  reduce  security  risks  while  saving  you  money.  To  reac 
"our  vyhite  paper  Putting  Security  to  the  Test,  <  a  1-800-927-2660 
i(  at  www.spirentcom.com  >/securitytest 
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NETWORK  EXCELLENCE 
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J-Series  &  JUNOS,  Always  Performance  Perfection. 

Are  you  sinking  in  a  patchwork  of  network  complexity?  Can  you  count  on  your 
network  to  deliver  the  security  and  predictability  that  your  business  needs  to 
move  to  VoIP  or  to  run  networked  ERP  applications?  Or  to  gain  the  flexibility  and 
cost  advantages  of  moving  remote  and  branch  office  connections  from  leased 
line  to  IPSec  VPN? 


Simply  leave  the  Status  Quo  for  unprecedented  simplicity,  predictability  and  platform 
independence:  Juniper’s  J-series.  The  J-series,  and  our  modular  JUNOS  operating  system, 
is  perfect  for  extended  and  distributed  enterprises  with  business-critical  application  - 
ensuring  superior  security  and  quality  over  a  converged  IP  network.  Now  forward-thinking 
enterprises,  government  organizations  and  research  &  education  groups  have  a  better 
alternative  in  forward-looking  platforms: 

•  Superior  Security:  Dedicated  resources  offer  the  most  advanced  defense  from  outside 
threats  while  giving  you  complete  control,  even  under  attack.  Add  new  filters  and 
policies  directly,  quickly,  easily. 

•  Unprecedented  Uptime:  JUNOS  architecture  allows  multiple  functions  to  run 
independently,  keeping  minor  issues  from  becoming  major  problems.  And  keeping 
enterprises  (and  network  managers)  secure  -  in  fact,  just  hit  “rescue”  for  speedy 
system  recovery.  What’s  more,  our  next-generation  CLI  means  accurate  configuration. 
Legacy  "routers”  can  only  wish  for  parallel  multi-function  excellence. 

•  Performance  Predictability:  Congestion-ending  architecture  ensures  the  most  important 
applications  receive  top  resource  priority,  so  you 
maintain  incredible  control  and  throughput  during 
the  most  demanding  times. 

•  Reduced  Operational  Complexity  &  Costs:  Our* 
clean-code  configuration  and  consistent  release 
schedules  require  minimal  effort  to  set  up  and 
maintain  -  no  wasted  time  on  constant  patches 
and  upgrades. 


►  SPECIFICATIONS 


Platform 

J2300 

J4300 

J6300 

Size 

1U 

2U 

2U 

Site  Connections 

2xTl/El/Serial 

2Xri/El/Serial 
to  8xTl/El 

2xTl/El/Serial 
to  DS3 

Fixed  LAN  Ports 

2xFE 

2xFE 

2xFE 

WAN  Interface  Slots 

n/a 

6  Open  Slots 

6  Open  Slots 

Fixed  WAN  Interfaces 

2xTl  or2xEl  or  2xSerial 

n/a 

n/a 

WAN  Interface 

Modules 

n/a 

2xTl/2xEl/ 

2xSerial/2xFE 

2xTl/2xEl/ 

2xSerial/2xFE/DS3 

Memory 

256  or  512  MB  DRAM 

256  or  512  MB  DRAM 

256/512/1024  MB  DRAM 

Redundancy 

No 

No 

Power 

Additional  Software 
Licenses 

Stateful  Firewall,  IPSec, 
J-Flow  Accounting, 

BGP  Route  Reflector 

Stateful  Firewall,  IPSec, 
J-Flow  Accounting, 

BGP  Route  Reflector 

Stateful  Firewall,  IPSec, 
J-Flow  Accounting, 

BGP  Route  Reflector 

►  CARRIER-CLASS  PERFORMANCE  &  SECURITY,  READY  FOR  YOU. 

Tired  of  old  answers?  Take  a  look  at  the  future:  www.juniper.net/products/jseries/ 

www.juniper.net 

888-JUNIPER  (888-586-4737) 
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Stuck  in  VoIP  limbo  with  Vonage 


People  do  stupid  things. At  least  that’s 
what  VoIP  services  provider  Vonage 
would  have  us  believe  in  its  TV  ads. 
1  signed  up  online  for  Vonage  service 
recently  to  lower  the  total  cost  of  owner¬ 
ship  of  my  remote  office.  Now  I’m  wonder¬ 
ing  if  I  might  wind  up  as  the  star  in  one  of 
those  Vonage  commercials. 

Save  lots  of  money  on  your  phone  ser¬ 
vice.  That’s  the  promise  at  the  heart  of 
Vonage.com.  The  pitch  is  intoxicating.  Un¬ 
limited  phone  service  for  $24.99  monthly 
For  a  small  business  or  remote  corporate 
user  shelling  out  upwards  of  almost  $150 
monthly  to  a  local  carrier  for  two  lines,  the 
$35  you  pay  Vonage  for  a  primary  line  plus 
a  fax  line  sounds  like  a  no-brainer. 

The  last  week  of  April  I  took  the  Vonage 
plunge. That’s  when  all  the  fun  started. 

Well,  it  actually  started  about  five  days 
after  I  logged  my  online  order  and  Vonage 
got  around  to  shipping  me  my  Linksys 
router.  Setup  wasn’t  bad;  I  was  up  and  dial¬ 
ing  within  an  hour  of  unpacking  the  box. 

I  started  making  my  VoIP  calls,  and  1  was 
impressed.  The  voice  quality  was  very 
good;  perhaps  as  good  or  better  than 
BellSouth’s.  But  the  strangest  thing  hap¬ 
pened.  People  calling  me  weren’t  getting 
through;  they  kept  getting  my  voice  mail  — 


my  BellSouth  voice  mail. Oh, on-net  Vonage 
callers  got  me  alright. I’m  guessing  because 
Vonage  maps  my  BellSouth  phone  number 
to  a  temporary  virtual  phone  number  for 
on-net  calls  only  But  callers  on  carrier  net¬ 
works  couldn’t  get  me  unless  they  called 
my  virtual  phone  number.  I  didn’t  even 
know  I  had  a  virtual  number.  The  order 
page  that  came  with  my  router  only  men¬ 
tioned  my  BellSouth  number  that  is  being 
ported  toVonage.lt  didn’t  mention  any  vir¬ 
tual  Vonage  number. 

So  I  did  the  unthinkable.  I  called  cus¬ 
tomer  assistance. Or,  I  tried  to  call.  1  got  lost 
in  a  labyrinth  of  call  distributor  hell,  gave 
up  once  and  eventually  called  back.  (If  all 
VoIP  service  providers  fail  as  miserably  at 
customer  service, VoIP  is  doomed.)  Finally, 
I  got  through  to  “Wayne.” 

He  told  me  what  1  feared:  Calls  to  my 
normal  business  phone  number  were  still 
routed  to  the  jack  in  my  wall,  not  to  my 
new  Linksys  broadband  router.  His  solu¬ 
tion?  “Put  another  phone  into  the  wall  out¬ 
let  and  answer  calls  on  one  phone  and 
make  calls  on  the  Vonage  line.”  Ah,  thanks, 
Wayne. 

Suddenly,  the  “save  lots  of  money  on  your 
phone  service”  promise  evaporated  from 
my  head  faster  than  you  can  say  G.711. 1 
realized  we’re  now  paying  for  Vonage  ser¬ 
vice  on  top  of  the  exorbitant  BellSouth 
phone  bill.  When  I  rang  Vonage  back  and 
talked  to  “Mark”  to  make  sure  I’d  heard 


Telemedicine 

continued  from  page  19 

American  Heart  Association,  the  first 
three  hours  are  critical  if  a  patient  is 
going  to  survive  and  have  a  chance  at  a 
normal  life.  Bernstein  says  80%  of 
strokes  are  called  ischemic.These  types 
of  strokes  can  be  treated  with  tPA,  a 
drug  that  breaks  up  clots,  which  gives 
patients  a  30%  better  chance  of  having 
little  after-effects  three  months  later. 
With  the  telemedicine  system,  the  con¬ 
sulting  neurologist  can  help  the  ER 
physician  administer  the  drug,  which 
ups  the  odds  of  recovery. 

In  addition  to  providing  videoconfer¬ 
encing  technology,  one  of  BST’s 
founders  developed  a  Stroke  Code  Box 
that  sits  on  each  Intern  II  used  for  stroke 
patient  care.  The  box,  like  a  “crash  cart” 
used  for  heart  attack  victims,  is  stocked 
with  the  medications  needed  to  quickly 
treat  a  stoke  patient. 

BST  is  working  with  Videre  Confer¬ 
encing  of  Quincy,  Mass.,  to  implement 
the  system  at  UMass  Medical  and  its 
affiliates,  which  have  not  been  publicly 
identified  but  are  scheduled  to  come 
online  in  early  June. Videre  helped  pick 
out  the  endpoints  being  used,  as  well  as 
set  up  the  dedicated  lines  between 


each  of  the  locations.  It  also  provides 
24-hour  monitoring  and  diagnostics  of 
the  system  for  BST. 

Each  site  is  connected  by  dedicated  T- 
1  lines,  with  conferences  running  at 
768K  bit/sec  over  a  private  IP  network 
provided  by  Global  Crossing,  says  Steve 
Cogliano,  co-founder  and  CTO  of 
Videre.  One  of  the  remote  sites  might 
have  to  be  connected  with  DSL,  mean¬ 
ing  the  conference’s  data  rate  will  be 
lowered  to  512K  bit/sec.  Videre  also 
helps  demarcate  the  hospital  data 
networks  to  accommodate  the  video- 
conferencing. 

Tandberg  was  selected  over  competi¬ 
tors  for  its  firmware  codec,  which  cuts 
down  on  the  software  problems  in  the 
system,  Bernstein  says.  Also,  the  Intern  II 
is  designed  for  the  medical  community 
and  comes  with  wireless  network 
access.  WPA  encryption  is  used  to  pro¬ 
tect  the  signal  inside  the  hospital. 

BST  is  helping  to  staff  the  center  at 
UMass  and  any  future  locations  with 
doctors,  and  plans  to  build  a  back-up 
center  at  its  Wellesley  headquarters  to 
provide  assistance.  Hospitals  that  par¬ 
ticipate  have  to  pay  an  initial  installa¬ 
tion  fee  and  are  charged  each  time  they 
use  the  system,  Bernstein  says.  BST  is 
hoping  to  sell  this  to  other  affiliations  in 
the  future.  ■ 


Wayne  right,  he  told  me  I  might  not  have 
my  BellSouth  number  ported  for  a  month. 

So  now  I’m  stuck  in  VoIP  limbo,  and  I  feel 
like  I’ve  done  something  incredibly  stupid. 
The  call  quality  is  pretty  good,  but  I  hear 
occasional  dropouts,  and  today  on  a  con¬ 
ference  call  I  hosted,  midway  into  the  call 
a  bandwidth  hiccup  resulted  in  the  loss  of 
my  Citrix  session,  my  instant  messaging 
session  and  half  of  my  VoIP  call.  Yup,  half.  I 
could  hear  other  parties  speaking  but  they 


Q  A 


Peterson 

continued  from  page  19 

As  Avaya  has  moved  deeper  into  software 
and  applications,  Microsoft  has  become 
more  interested  in  voice  technology.  Does 
this  worry  you? 

That’s  absolutely  on  our  radar  screen. 
Microsoft’s  Live  Communication  Server 
does  call  control,  so  In  that  sense  it’s  a 
direct  competitor.  But  call  control  long 
ceased  to  be  the  only  offer  in  a  PBX. 
There  are  800  features  that  were  creat¬ 
ed  at  different  times  for  different  cus¬ 
tomers  that  we  support.  Microsoft  will 
be  awhile  catching  up  with  that.  Having 
said  that,  there  are  a  number  of  users, 
particularly  at  the  small  end,  where  the 
LCS  [Live  Communication  Server] 
could  catch  on.  Certainly  in  the  begin¬ 
ning,  it’s  cheap  dial  tone.  Microsoft  has 
a  huge  network  of  developers  that  you 
would  expect  to  be  writing  against 
that.  It’s  going  to  be  a  rapidly  develop¬ 
ing  area.  But  telephony  is  a  non-trivial 
exercise.  So  I  don’t  think  I’m  worried 
about  large  companies  turning  to  LCS 
in  a  wholesale  way  in  the  near  term. 

Is  the  integration  of  voice  over  Wi-Fi  and 
cell  phone  technology  going  to  happen 
soon? 

Keep  in  mind  the  cellular  network  is  a 
TDM  network.There’s  certainly  some 
[technologies]  that  we’re  working  on. 
We’ve  announced  partnerships  with 
Proxim  and  Motorola,  where  a  dual¬ 
mode  handset  hooks  up  to  a  hot  spot. 
Our  recent  Nokia  announcement  goes 
the  other  way;  it  leaves  the  phone  on 
the  cellular  network,  but  it  extends  the 
PBX  call  control  out  to  treat  the  cellu¬ 
lar  phone  as  an  extension  to  the  PBX. 
This  retains  applications  that  are  on 
the  PBX,  like  call  recording  and  those 
kinds  of  things.There  will  be  other  evo¬ 
lutions  like  that.  Right  now  they’re  not 
dependent  on  an  IP  transport  out  to 
the  phone.  But  that  kind  of  thing  would 
enable  streaming  video,  videoconfer¬ 
ence  calls  on  the  phone  more  readily 
than  the  TDM  does  today 


couldn’t  hear  me.The  router  was  decoding 
but  not  encoding  voice  traffic. Swell. 

My  advice?  If  you’re  thinking  about  VoIP 
services  for  remote  offices,  take  a  long, 
hard  test  drive  and  gather  as  much 
hands-on  data  as  you  can  before  you 
make  the  leap. 

Bruno  is  executive  editor  at  The  Tolly 
Group.  He  can  be  reached  at  cbruno@ 
tolly.com. 


With  so  much  focus  on  software  and  IP  tele¬ 
phony,  what  is  the  state  of  TDM  technology 
support  and  product  development? 

We  treat  TDM  as  an  investment  to  be 
leveraged.  We  want  to  add  value  to  the 
pure  IP  world,  but  we  recognize  that’s 
not  an  environment  that  most  of  our 
customers  will  be  going  to  for  a  long, 
long  time.  If  we  create  a  solution  that  is 
deliverable  in  the  IP  world,  we  immedi¬ 
ately  think  of  how  it  can  be  delivered 
as  much  as  possible  by  a  TDM  user  on 
an  IP  extended  link.  Our  customers 
can  then  get  a  lot  of  value  without  hav¬ 
ing  to  go  through  an  expensive  rip  and 
replacement.They  can  do  that  when 
they’re  ready,  when  it  makes  sense. 

There  is  a  lot  of  interest  as  to  what  one 
particular  Avaya  customer  —  Merrill  Lynch 

—  is  doing  with  VoIP:  deploying  a  mix  of 
Avaya  IP  and  TDM  technology  in  large  corpo¬ 
rate  offices,  and  using  Cisco  VoIP  equip¬ 
ment  in  branch  offices.  Is  this  the  state 
that  other  large  customers  are  in,  regard¬ 
ing  VoIP  and  telephony  —  using  multi-vendor 
IP  and  TDM  technology  in  separate  areas? 
Most  companies  are  looking  for  a 
more  uniform  solution  than  the  one 
Merrill  Lynch  has  opted  for.  As  applica¬ 
tions  extend  outward,  that  uniformity 
will  become  somewhat  more  valuable. 
If  you  make  a  decision  on  a  cost  opti¬ 
mization  side, you  could  end  up  with 
different  solutions  in  different  environ- 
ments.The  example  you  cite  includes 
two  extremely  different  environments 

—  large  central  locations  vs.  branch 
offices  with  handfuls  of  people. 

Overall,  Cisco’s  approach  to  VoIP  isn’t 
as  constructive,  I  think,  as  ours.They 
are  on  one  end  of  the  spectrum,  doing 
very  proprietary  implementations  of 
quote/unquote,  open  standards.  I 
would  characterize  us  as  on  the  other 
end;  we’re  trying  to  be  open  so  these 
things  can  work  together.In  the  long 
run  we’ll  see  what’s  a  better  strategy.  B 
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Microsoft 


'When  we  calculated  the  total 
cost  of  ownership  for  Red  Hat 
Linux  using  a  10 -year  Net 
Present  Value  Model,  we  were 
surprised  at  how  much  higher 
it  was  than  for  Windows®." 

—J.E.  Henry,  CIO, 
Regal  Entertainment  Group 


Regal  Entertainment  Group,  the  largest  movie  theater  operator  in  the  U.S.,  ran 
its  POS  concession  and  ticket  terminals  on  Red  Hat  Linux.  However,  they  saw 
that  it  lacked  the  vendor  support  and  remote  management  tools  they  needed 
to  support  their  strategic  plans.  After  an  in-depth  comparison,  Regal  found 
that  Windows  Embedded  would  deliver  a  lower  TCO,  improved  security,  and 
fewer  risks.  "With  Windows,  we  get  an  integrated,  easily  managed  platform 
that  can  extend  from  the  data  center  to  our  POS  devices,"  says  Cliff  DeYoung, 
CTO  at  Regal. 

To  get  the  full  case  study,  other  case  studies,  or  third-party  findings,  go 

to  microsoft.com/getthefacts 


Windows 
Server  System 
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Web  filtering  tools  handling  eveNarger  jobs 


■  BY  ELLEN  MESSMER 

From  the  time  the  World  Wide  Web  took  off  in  the 
mid-90s,  corporations  began  looking  for  ways  to  filter 
out  access  to  its  more  lurid  displays,  but  IT  managers 
who  use  filters  today  say  they’re  good  for  much  more 
than  blocking  access  to  porn. 

Because  keeping  company  resources  safe  from  spy- 
ware,  adware  and  phishing  is  of  growing  importance,  Web 
filter  technologies  are  keeping  up  by  blocking  sites 
known  to  be  engaged  in  those  types  of  threats.  Filters 
have  expanded  to  block  peer-to-peer  file  sharing  sites, 
which  pose  copyright  concerns  and  often  spread  adware. 
Companies  using  Web  filters  expect  them  to  play  an  ever- 
larger  role  in  enterprise  protection. 

“Some  sites  are  offensive  to  employees,  such  as  pornog¬ 
raphy  or  gambling,  others  are  time-wasters,  such  as  sports," 
says  Jeff  Smestuen,  network  manager  at  ice-cream  maker 
Blue  Bell  Creameries  in  Brenham, Texas,  which  has  750 
employees  at  its  manufacturing  facilities  and  branch  of- 
fices.'And  Internet  radio  and  TV  sites  are  bandwidth  hogs.” 

But  these  days,  Web  sites  also  might  be  just  plain  dan¬ 
gerous,  pushing  key-loggers  out  to  steal  personal  informa¬ 
tion  or  trying  to  trick  people  into  entering  sensitive  data. 

“The  phishing  fraud  we’ve  seen  firsthand,”  Smestuen 
says.“The  Web  sites  are  so  professional  looking  and  some¬ 
times  employees  panic  and  ask  IT  for  help.” 

Blue  Bell  uses  Websense  Enterprise  as  its  filtering  gate¬ 
way  to  the  Internet.  Over  the  past  year, Websense  added  a 
way  to  automatically  block  phishing  and  other  fraud- 
connected  Web  sites  as  soon  as  they  were  identified. 

“It  does  a  pretty  good  job  of  blocking  these  sites,” 
Smestuen  says.“Nothing  is  going  to  get  it  all,  but  this 
helps.” 

Web  filters  also  are  expected  to  be  flexible  so  that  net¬ 
work  managers  can  cut  employees  some  slack  even 
while  stopping  them  from  whiling  away  the  day  on  the 
Web.  Blue  Bell,  for  instance,  can  set  a  “limit  by  quota”  on 
the  number  of  times  an  employee  is  allowed  to  go  to 
some  sites,  such  as  those  for  weather  or  news. 

“It  can  get  to  be  a  morale  issue  if  you  crank  it  down  too 
much,”  Smestuen  says  about  using  a  Web  filter  to  police 
an  employee’s  Web  use. 

The  Web-filtering  market 

According  to  research  firm  Frost  &  Sullivan,  industry  vet¬ 
eran  Websense  still  holds  almost  half  of  the  Web-filtering 
market  along  with  rival  SurfControl  (see  graphic). 

But  since  the  early  days  of  the  Web,  competition  has 
grown,  with  Secure  Computing,  Symantec  and  McAfee 
also  scoring  gains  in  a  growing  field  of  contenders. 

This  month  Websense  pointed  out  how  times  have 
changed  by  detailing  the  sharp  increase  of  entries  in  its 
master  database  of  monitored  sites. 

When  it  first  started  in  1996,  its  filtering  database  con¬ 
sisted  of  26  categories  with  roughly  25,000  Web  sites. 
Today,  the  Websense  Master  Database  stands  at  10  million 
Web  sites  and  more  than  90  categories  as  it  tracks  shop¬ 
ping,  gambling,  games,  entertainment  and  MP3  sites. 
Several  other  Web-filtering  vendors,  including  Lightspeed 
Systems,  also  claim  to  be  well  past  the  10  million  mark. 

During  the  first  quarter  alone, Websense  says  it  catego¬ 
rized  more  than  13,000  Web  sites  engaged  in  spyware, 


Choose  your  filter 

According  to  research  firm  Frost  & 

Sullivan,  Websense  and  SurfControl  held 
the  largest  market  share  in  Web  filtering, 
sharing  about  44%  of  the  market. 

World  market  for  content-filtering  products  (in  milions) 
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phishing  and  other  frauds  in  order  to  reduce  customer’s 
exposure.  According  to  Websense,  spyware-related  sites 
have  grown  from  37,800  sites  to  more  than  89,000  over 
the  last  year. 

Tom  Trumble,  network  administrator  for  Merrimac 
County  in  Concord,  N.H., says  spyware  has  become  a 
major  threat  to  desktop  security  and  privacy“We’ve  seen  a 
serious  increase  in  spyware  drive-by  installs,”  says  Trum¬ 
ble,  describing  how  unwanted  code  is  dropped  from  the 
Web  site  onto  the  Web  surfer’s  machines  without  his 
knowledge. 

Merrimac  County  recently  acquired  the  Blue  Coat  appli¬ 
ance  Interceptor,  which  combines  URL  filtering  with 
blocking  spyware  downloads.  Because  monitoring  and 
blocking  access  to  Web  sites  is  a  sensitive  subject  that 
affects  an  entire  organization, Trumble  says  he’s  present¬ 
ing  his  Web  policy  ideas  before  the  board  of  commission¬ 
ers  to  get  the  government  equivalent  of  management 
buy-in  before  monitoring  or  blocking  access  for  agency 
employees. 

“We’d  rather  hear  the  objections  in  advance  rather  than 
later’Trumble  notes.“We  don’t  want  to  be  seen  as  Big 
Brother’’ 

When  governments  anywhere  in  the  world  set  policies 
for  Web  filtering  on  a  national  scale.it  naturally  draws 
attention  from  free-speech  advocates  concerned  it  might 
involve  political  or  religious  suppression. 

A  research  group  called  the  OpenNet  Initiative,  a  part¬ 
nership  between  the  University  of  Toronto,  Harvard  Law 
School  and  Cambridge  University  has  issued  several 
reports  over  the  past  few  years  detailing  how  China,  Iran 
and  Saudi  Arabia,  among  others,  make  use  of  Web  filter¬ 


ing  to  achieve  political  ends. 

A  study  published  last  month, titled  “Internet  filtering  in 
China  in  2004-2005:  A  Country  Stud/ says  the  Chinese 
government’s  ability  to  block  access  to  political,  religious 
and  news  information  makes  it  “the  most  sophisticated 
effort  of  its  kind  in  the  world.” 

Acceptable  use,  American-style 

When  filtering  access  to  the  Web,  corporations,  govern¬ 
ment  agencies  and  schools  in  the  U.S.  often  require  net¬ 
work  users  to  agree  to  Internet  acceptable-use  policies  by 
signing  a  form  stipulating  off-limits  activities. 

According  to  the  U.S.  Department  of  Education,  83%  of 
public  schools  have  students  sign  such  contracts  now. 

But  that  doesn’t  mean  Web  monitoring  is  easy  for  school 
IT  administrators  who  manage  the  high-speed  networks 
that  are  increasingly  common  in  U.S.  public  schools.  Some 
schools  don’t  just  have  forbidden  Web  sites  —  they  have  a 
list  of  forbidden  search  words  and  if  a  Web  filter  catches 
one  being  used,  IT  administrators  are  compelled  to  bring 
that  to  the  attention  of  school  management. 

This  happens  from  time  to  time  at  Bullard  Independent 
School  District  in  Texas,  which  uses  Lightspeed  Systems’ 
Trusted  Traffic  Control  appliance  to  monitor  Web  access 
from  its  high-speed  LAN  to  the  Internet. 

“High  schools  have  procedures  for  all  this,”  says  Lee 
Sleeper,  Bullard’s  technology  manager.  Discipline  for  stu¬ 
dent  misbehavior  might  involve  the  school’s  deciding  to 
temporarily  revoke  the  student’s  network  privileges. 

There’s  the  prevailing  notion  in  some  quarters  that 
America,  the  land  that  gave  rise  to  adult-porn  Web  sites, 
also  is  the  country  spending  the  most  time  and  money  in 
making  sure  employees  and  students  aren’t  able  to  get  to 
them. 

According  to  Jose  Lopez,  senior  industry  analyst  in  net¬ 
work  security  for  Frost  &  Sullivan,  which  is  based  in 
London,  says  two-thirds  of  Web-filtering  product  sales  are 
made  in  the  U.S. 

In  Europe,  the  U.K.  and  Germany  are  the  only  significant 
markets,  Lopez  notes,  adding  the  Scandinavian  countries 
seem  to  have  little  interest  in  blocking  porn. 

Danny  McCampbell, senior  network  analyst  at  Mahle, 
the  Morristown, Tenn., subsidiary  of  German-based  auto¬ 
motive  part  manufacturer  Mahle  GmbH, says  it’s  easy  to 
get  the  impression  that  Europe  has  a  different  attitude 
about  risque  material. 

Mahle  uses  SurfControl’s  Web  Filter  to  block  sites  the  fil¬ 
ter  deemed  to  be  “adult  content.”  But  Mahle  found 
employees  sometimes  couldn’t  get  access  to  European 
business  sites,  such  as  travel  sites  to  make  reservations, 
because  these  sites  had  risque  photos  posted  on  them. 

“The  user  would  call  and  sayTm  trying  to  get  on  this 
site  but  I  can’t,’”  McCampbell  says.“So  we  created  an 
exception  rule  for  the  filter  that  allows  access  but  blocks 
the  risque  advertising.” 

In  Web  filtering,  exceptions  can  be  the  rule. 

Although  Mahle  doesn’t  generally  permit  access  to  gam¬ 
ing  and  entertainment  sites,  the  company  makes  an 
exception  for  the  Nascar  racetrack’s  Web  site  at 
Nascar.com. 

“We’re  an  automotive  manufacturer  and  we  allow  it 
because  we  manufacture  pistons  for  Nascar’’ 

McCampbell  says.  ■ 
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Proventia  ESP  (Enterprise  Security  Platform)  from  ISS  stops  Internet  threats  before  they  impact  your  network.  With  intrusion  prevention  and  vulnerability  assessment  products  and 
services,  Proventia  ESP  gives  you  centralized  control  and  enables  network  uptime.  Only  ISS  keeps  you  ahead  of  the  threat  with  preemptive  protection  to  reduce  your  overall  risk. 

Download  a  free  white  paper  at  www.iss.net/ESP/network,  or  call  1-800-776-2362. 
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With  lightning  speed  and  brilliant  color,  no  wonder 
the  Xerox  Phaser®  8400  printer  is  getting  rave  reviews. 
And  starting  at  just  $999,  it’s  cause  for  celebration. 
Xerox  Color.  It  makes  business  sense. 


What  does  $999  buy  you?  Quite  a  bit,  when  you’re 
talking  about  the  Phaser  8400.  It  prints  vivid  color 
plus  black  and  white  at  the  same  incredible  speed— 24 
pages  per  minute.  So  it’s  no  surprise  that  it’s 
winning  all  kinds  of  industry  recognition.  Like  PC 
World’s  Best  Buy  Award  for  Color  Laser  Printers,  as 


x@rox.com/office/winning8400 

1-877-362-6567  ext.  1977 


well  as  Buyer’s  Laboratory’s  Pick  of  the  Year  for 
Outstanding  Critical  Color  Printer.  Not  to  mention 
Better  Buys  for  Business’s  2004  Hot  Pick  Award.  To 
learn  more  about  our  full  line  of  Xerox  network 
printers,  digital  copiers  and  multifunction  systems, 
call  or  visit  our  website  today.  Champagne,  anyone? 
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New  appliances  put  squeeze  on  data 

Data  Domain  says  its  data  compression  appliances  and  software  are  cost-effective  alternatives  to  tape. 


Backup  plan 

Data  Domain’s  new  DD400  series  appliances  squeeze  data  and  back  it 
up  on  disk,  providing  what  the  company  claims  is  a  faster  and  roughly 
cost-equivalent  alternative  to  tape-based  backup. 

Primary  storage 
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Data  Domain  DD400 

■  BY  DENI  CONNOR 

Privately  held  Data  Domain  last  week 
rolled  out  high-end  versions  of  its  back-up 
and  recovery  system  —  offerings  that 
exploit  compression  technology  to  make 
backing  up  data  on  disk  cost  competitive 
as  compared  with  tape,  the  company  says. 

By  filtering  redundant  components,  the 
new  DD400  appliances  and  accompany¬ 
ing  software  can  be  used  to  compress  data 


■  Fujitsu  last  week  began  shipping  a 
faster  version  of  its  Sparc64  V  pro¬ 
cessor  with  five  models  of  its  Prime- 
Power  Unix  servers.  The  servers  fea¬ 
ture  a  2.08-GHz  Sparc64V  CPU  with 
4M  bytes  of  on-chip  cache.  This  is  a 
bump  from  the  last  version,  which  had 
a  clock  speed  of  1.89  GHz  and  3M 
bytes  of  cache.  Pricing  for  the  sys¬ 
tems  with  the  new  processors  will 
increase.  Prices  will  range  from 
$42,780  for  the  PrimePower  650  to 
$553,000  for  the  PrimePower  2500. 

■  PalmOne  last  week  took  the  term 
"interim"  out  of  Ed  Colligan's  job  title, 
making  him  the  company's  new  CEO 
and  president.  The  move  preceded 
PalmOne’s  launch  of  the  first  in  its 
new  mobile  manager  range  of  hand¬ 
held  computing  products.  Colligan 
joined  Palm  Computing  in  1993  as  vice 
president  of  marketing,  later  co-found- 
ing  Handspring,  where  he  served  as 
president  and  COO  (PalmOne  bought 
Handspring  in  2003). 

■  HP  is  shipping  BladeSyslem  pack¬ 
ages  for  small  and  midsize  business 
featuring  a  1U  power  supply.  The 
power  enclosure,  with  up  to  six  hot- 
plug  power  supplies,  starts  at  $1,199. 
Customers  also  can  buy  the  enclo¬ 
sure  (with  two  power  supplies)  as  part 
of  a  package  that  includes  one  HP 
ProLiant  server  blade,  an  HP  Blade- 
System  enclosure  and  management 
software  starting  at  about  $3,000. 


by  a  factor  of  20,  the  company  says. 

Because  the  company’s  compression 
algorithm  is  data-format  independent,  the 
back-up  images  its  products  create  can 
contain  both  structured  database  data  and 
unstructured  text  files.Typical  back-up  soft¬ 
ware  such  as  EMC/Legato  NetBackup 
writes  data  to  the  DD400  in  an  unchanged 
fashion.  As  data  is  stored  longer  on  the 
appliance,  the  compression  factor  will 
increase  because  of  the  amount  of  redun¬ 
dant  data  already  culled  out,  Data  Domain 
says. 

The  offerings,  which  succeed  the  4-year- 
old  company’s  smaller  capacity  DD200 
appliances,  come  in  three  models,  ranging 
in  capacity  from  15T  to  83T  bytes.  Each 
model  —  the  DD410.DD430  and  DD460  — 
also  has  different  throughput  characteris¬ 
tics.  The  DD410,  for  instance,  can  back  up 
data  at  160G  byte/hour,  compared  with  the 
high-end  DD460,  which  can  perform  at 
almost  twice  that  —  290G  byte/hour. 

Ephraim  Baron,  senior  director  for  IS&T 
server  operations  at  EF1  in  Foster  City  Calif., 
uses  the  DD200  and  plans  to  add  a  DD400 
to  back  up  as  much  as  70T  bytes  of  engi¬ 
neering  data. 

“We  were  facing  increasing  costs  of  tape 
backups  and  the  lengthening  of  the  back- 


■  BY  ROBERT  MCMILLAN 

IBM  and  Red  Hat  last  week  announced  a 
range  of  initiatives  designed  to  woo  users 
of  Sun’s  Solaris  operating  system  over  to 
Red  Hat  Linux. 

IBM’s  System  and  Technology  group  will 
begin  offering  free  migration  assessments 
to  Solaris  customers  who  want  to  know 
more  about  the  costs  and  benefits  of  mov¬ 
ing  from  Solaris  to  Red  Hat  Linux.  Over  the 
past  year,  IBM’s  AIX  group  has  sponsored 
about  500  such  assessments  for  Solaris  and 
HP-UX  users,  and  the  company  now  hopes 
to  complete  up  to  twice  as  many  by  year- 
end,  according  to  Scott  Handy,  vice  presi¬ 
dent  of  worldwide  Linux  at  IBM. 

Big  Blue  sells  Red  Hat  Linux  and  Novell’s 
SuSE  Linux  on  a  variety  of  its  hardware, 
including  its  xSeries,  pSeries  and  zSeries 
servers,  but  these  new  initiatives  were 
designed  in  partnership  with  Red  Hat, 


up  window)’ he  says.“The  staff  I  have  is  pret¬ 
ty  senior  and  1  don’t  want  them  spending 
time  swapping  tapes  and  getting  data 
packaged  to  go  off-site.  Every  time  1  sent 
management  a  purchase  requisition  of 
$40,000  worth  of  tape,  they  cringed.” 

With  the  Data  Domain  appliance,  Baron 
now  can  keep  data  on-site  longer. 

“We  are  now  keeping  three  to  four 
months  of  data  online  that  before  would 
have  gone  off-site  each  month,”  he  says. 
“We’re  essentially  backing  up  the  same 


Handy  says.  Red  Hat  Linux  also  is  offered 
on  servers  from  other  hardware  vendors. 

The  migration  assessments  will  be  con¬ 
ducted  by  a  team  of  150  engineers  that 
IBM  acquired  in  2003  when  it  purchased 
the  application-porting  services  division  of 
Sector7  USA,  Handy  says.  The  assessments 
will  be  generally  available  to  customers 
starting  June  1. 

IBM  also  has  been  working  with  22  finan¬ 
cial  services  software  vendors,  including 
Cameron  Systems  and  TimesTen,  to  help 
them  port  their  Solaris  products  over  to 
Linux.These  vendors  have  moved  33  of  an 
anticipated  48  total  applications  over  to 
Linux,  Handy  says. 

A  third  component  of  the  program  will 
be  IBM’s  sponsorship  of  seminars  and  edu¬ 
cational  events  designed  to  help  cus¬ 
tomers  with  their  Linux  migration  ques¬ 
tions,  Handy  says. 

Sun  has  attacked  Red  Hat’s  Linux  distrib- 


data,but  we  aren’t  doing  it  all  the  time." 

The  DD400  boxes  work  with  IBM/Tivoli 
Storage  Manager,  HP  OpenView  Data 
Protector  and  BakBone  Software’s 
NetVault,as  well  as  with  Veritas  NetBackup 
and  Backup  Exec,  EMC/Legato  Networker 
and  CommVauIt  Galaxy 
The  DD400  appliances  start  at  $19,000. 
Data  Domain  has  collected  $26.3  million 
in  venture  funding,  and  is  backed  by 
Greylock,  New  Enterprise  Associates  and 
Sutter  Hill  Ventures.* 


ution,  calling  it  an  incompatible  variation, 
or  “fork,”  of  Linux,  and  Sun  has  promoted 
Solaris  on  Advanced  Micro  Devices’ 
Opteron  as  a  technically  superior  alterna¬ 
tive  to  Red  Hat  Linux. 

IBM  hopes  the  new  programs  will  help 
counter  some  of  Sun’s  rhetoric,  Handy  says. 
“We  decided  it  was  really  important  that 
we  partner  with  Red  Hat  in  addressing  this 
challenge.” 

But  the  more  important  reason  has  to  do 
with  timing,  Handy  says.  With  much  of  the 
Sun  equipment  bought  during  boom  years 
now  depreciated,  IBM  sees  a  chance  to  sell 
its  own  hardware  into  these  accounts,  he 
says.Those  servers  are  now  four  and  a  half 
years  old,  so  the  real  bulk  of  the  Solaris-to- 
Linux  migration  is  a  wave  that’s  occurring 
now)’  Handy  says. 

McMillan  is  a  correspondent  with  the  IDG 
News  Service. 


IBM,  Red  Hat  target  Solaris  with  Linux 


Finisar’s  NetWisdom 

Ensures  SANs  Deliver  On  Application  Performance 


CIOs  know  that  good  application  performance  is  critical  to  employee  pro¬ 
ductivity,  customer  satisfaction,  and  even  business  opportunities.  That's  one 
reason  more  and  more  enterprises  are  deploying  storage  area  networks  - —  SANs 
are  a  highly  reliable,  high-performance  alternative  to  directly  attached  storage, 
helping  to  boost  overall  application  throughput  and  uptime. 

However,  SANs  are  both  a  blessing  and  a  curse.  On  the  plus  side,  SAN 
components  are  highly  interoperable,  allowing  SAN  managers  to  combine 
switches,  host  bus  adapters  (HBAs)  and  other  components  from  a  variety 
of  vendors.  On  the  minus  side,  SAN  vendors  only  provide  performance 
information  for  their  component,  which  makes  it  difficult  to  get  a  handle  on 
end-to-end  SAN  performance,  error  levels,  and  capacities.  Consequently,  if  an 
application's  performance  degrades,  SAN  managers  often  cannot  determine 
what  role  —  if  any  —  the  SAN  played. 

What  SAN  managers  need  is  a  management  tool  that  allows  them  to 
view  the  SAN  holistically  and  track  application  performance  across  the 
entire  fabric.  Finisar's  NetWisdom  provides  this  capability.  Through  its 
comprehensive  monitoring  and  reporting  features,  NetWisdom  gives  SAN 
managers  real-time  information  ranging  from  overviews  to  detailed  perfor¬ 
mance,  error,  and  capacity-related  metrics  for  all  SAN  transactions. 

Using  hardware  and  software  probes,  NetWisdom  monitors  data  in  real 
time  as  well  as  provides  trend  analysis  of  historical  data.  Through  its  alarm 
notification  and  alerts  feature,  SAN  managers  are  made  aware  of  device 
degradation  symptoms,  bottlenecks,  and  errors,  enabling  them  to  address 
problems  before  they  impact  application  performance  or  availability.  In 
addition,  SAN  managers  can  baseline  SAN  performance  with  NetWisdom, 
allowing  them  to  establish  realistic  service  level  agreements  (SLAs)  and 
ensure  SLA  compliance. 


NetWisdom’s  dashboard  displays  the  overall 
health  of  the  SAN  at  a  glance. 


Performance  Management 

Applications  vary  in  their  performance  sensitivities,  making  it  a  challenge 
to  ensure  each  application  gets  the  response  time  and  throughput  levels  it 
needs  from  the  SAN.  By  providing  link  and  port  performance  statistics  as 
well  as  transaction  details,  NetWisdom  helps  SAN  managers  deliver  the 
performance  a  given  application  requires.  For  example,  for  each  server 
HBA-storage  port  target-LUN  combination,  NetWisdom  can  provide  informa¬ 
tion  such  as  read  and  write  throughput  in  MB/sec;  issued  vs.  completed  reads 
and  writes;  and  average,  minimum,  and  maximum  Exchange  Completion 
Time  (ECT). 

ECT  measures  the  time  from  when  a  host  requests  data  to  when  it  receives 
that  data,  and  is  a  good  way  to  track  SAN  response  time.  Using  NetWisdom 
to  establish  the  baseline  ECT  for  each  application  and  each  disk  array,  a  SAN 
manager  can  ensure  that  a  given  disk  array  is  capable  of  supporting  a  given 
application.  For  example,  an  older  array  with  an  ECT  of  1200  msec  would 
be  a  poor  choice  to  house  data  for  an  application  that  requires  an  ECT  of 
200  msec. 

Likewise,  NetWisdom  can  monitor  data  transfer  and  I/O  rates  on  a 
per-transaction  basis  and  alert  SAN  managers  if  performance  falls  below 
acceptable  levels.  For  example,  an  editing  group  working  with  a  high 
definition  video  processing  application  utilizing  a  specific  set  of  LUNs 
used  NetWisdom  to  ensure  the  SAN  delivered  1  TB  of  data  per  hour  (277 
MB/sec)  and  had  I/O  times  of  30  milliseconds  or  less. 

Uptime  and  Capacity  Management 

To  their  credit,  SANs  rarely  fail  completely.  More  often,  individual  compo¬ 
nent  failures  or  rising  traffic  levels  trigger  overload  conditions  that  can  result  in 
an  application  being  starved  of  SAN  resources.  Depending  on  the  application, 
such  resource  deprivation  could  result  in  a  dip  in  performance  or  an  outright 
failure  requiring  human  intervention.  For  example,  if  a  critical  Microsoft  SQL 
application  and  an  email  application  share  the  same  storage  array,  a  series  of 
emails  with  large  attachments  could  hog  all  available  SAN  bandwidth,  leaving 
none  for  SQL  users.  In  another  scenario,  one  HBA  in  a  pair  could  fail,  forcing 
all  traffic  onto  the  remaining  HBA,  creating  an  overload  condition. 

With  NetWisdom,  SAN  managers  can  track  the  volume  of  traffic  on  links 
and  ports,  and  be  alerted  if,  for  example,  the  traffic  on  a  switch  link  exceeds 
60  percent  utilization.  By  tracking  traffic  patterns  and  usage,  SAN  managers 
can  easily  see  when  links  and  switches  are  approaching  overload  conditions, 
letting  them  accurately  plan  where  and  when  to  add  capacity  to  the  network, 
avoiding  unnecessary  upgrades  and  preventing  degradation  of  application 
performance. 

Similarly,  NetWisdom  can  alert  SAN  managers  if  there  is  a  spike  in 
errors.  A  pattern  of  errors,  such  as  aborts,  link  resets,  or  fabric  log-outs  and 
log-ins,  can  signal  problems  with  particular  SAN  components.  By  tracking 
and  trending  such  errors,  SAN  managers  can  pro-actively  schedule  main¬ 
tenance  and  replace  or  reconfigure  a  component,  preventing  a  failure  from 
impacting  users. 

SANs  are  a  crucial  link  in  the  application  performance  chain.  With  the 
right  tool,  SAN  managers  can  accurately  monitor  bandwidth  utilization 
and  project  for  additional  capacity,  identify  and  isolate  errors,  and  address 
performance  bottlenecks  before  they  impact  application  performance  or 
availability.  With  NetWisdom,  SAN  managers  can  ensure  that  the  SAN  is 
delivering  the  application  performance  that  users  need. 


For  more  information  on  NetWisdom  and  SAN  Performance 
Management  sign  up  for  our  FREE  webinar  by  going  to 
http://finisarevents.webex.com  or  call  (408)  400-1110 
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■  BY  DENISE  DUBIE 

IBM  last  week  rolled  out  a  series  of  prod¬ 
ucts  aimed  at  helping  customers  better 
track  changes  to  and  monitor  for  problems 
with  business  applications. 

The  company  unveiled  its  Tivoli  Change 
and  Configuration  Management  Database 
(CCMDB)  software,  which  will  let  cus¬ 
tomers  collect  system  and  application 
configuration  information  across  multiple 
data  stores  and  create  a  database  that  will 
let  customers  track  changes  in  their  infra¬ 
structures  and  determine  how  those 
changes  affect  application  performance. 

Companies  such  as  BMC  Software  also 
have  delivered  this  type  of  database  that 
would  present  data  from  multiple  data 
stores  in  one  consolidated  view. 

Tivoli  CCMDB  is  installed  on  a  server  and 
See  IBM,  page  32 


■  Xythos  Software  last  week 
unveiled  new  versions  of  its  docu¬ 
ment  and  file  management  software 
suites  aimed  at  improving  content 
security.  New  to  Version  5.0  of 
Xythos  Enterprise  Document 
Management  Suite  are  automated 
document-classification  tools  and 
support  for  retention  schedules, 
which  spare  end  users  from  having 
to  manually  keep  up  with  corporate- 
retention  policies  as  a  document’s 
status  changes.  Workflow  features 
for  routing  documents  through  pre¬ 
defined  review  and  approval 
processes  also  are  new  to  Version 
5.0.  For  the  education  industry, 
there’s  Xythos  Digital  Locker  Suite 
5.0,  which  includes  features  aimed  at 
protecting  content  that  users  share 
on  and  off  campus.  For  the  developer 
community,  WebFile  Development 
Suite  5.0  is  designed  to  help  applica¬ 
tion  developers  integrate  content 
management  functions  within  cur¬ 
rent  applications  and  projects. 


■  BY  ANN  BEDNARZ 

CenterPoint  Energy  isn’t  accus¬ 
tomed  to  being  an  early 
adopter  of  new  technologies. 

But  when  the  Texas  Legislature 
voted  to  deregulate  the  state’s  elec¬ 
tric  industry,  the  Houston  electric 
utility  faced  big  changes  to  its 
operating  model  —  changes  that 
exponentially  increased  the  inte¬ 
gration  demands  on  CenterPoint’s 
IT  systems. 

Today,  CenterPoint  does  business 
in  the  deregulated  energy  market 
not  as  an  old-school  utility  compa¬ 
ny  with  monolithic  systems,  but  as  a 
nimble  energy-delivery  company 
with  a  composite  application  frame¬ 
work  that  gives  company  manage¬ 
ment  customized  diagnostic  dash¬ 
boards  for  keeping  tabs  on  every¬ 
thing  from  individual  transactions 
to  overall  business  performance. 

Before  deregulation  took  effect  in 
2002,  CenterPoint’s  electric  utility 
business  did  it  all  —  it  generated 
power,  sold  and  delivered  power  to 
customers,  and  collected  payments. With 
deregulation,  its  focus  shifted  to  electric¬ 
ity  transmission  and  distribution,  while 
competing  providers  sell  the  electricity 
to  consumers. 

“The  law  said  that  the  regulated  utility 
company  could  no  longer  sell  electricity 
Our  only  function  would  be  the  trans¬ 
mission  and  distribution  of  electricity’ 
says  Mary  Rich,  IT  manager  of  the  $17  bil¬ 
lion  company,  which  today  provides 
electric  and  natural  gas  delivery  That  dis¬ 
tinction  triggered  massive  integration 
challenges  because  CenterPoint  now 
has  to  coordinate  with  dozens  of  market 
participants  such  as  other  electric  com¬ 
panies,  as  well  as  the  Electric  Reliability 
Council  ofTexas  (ERCOT), which  admin¬ 
isters  the  state’s  power  grid. 

“When  we  did  it  all  in-house,  a  cus¬ 
tomer  would  call  the  electric  company 
and  tell  us  they  needed  their  electricity 
turned  on.  Customer  service  would  ask 
several  questions  and  enter  the  data  into 
a  single  system.  That  same  mainframe 
system  that  set  you  up  would  produce 


Doing  business  post-deregulation 

CenterPoint  Energy  built  a  business-to-business  integration  hub  for  swapping 
orders  with  its  commercial  partners.  Built  in  business  activity  monitoring 
features  let  internal  users  keep  tabs  on  key  performance  metrics. 


The  SeeBeyond  platform  deconstructs  incoming 
files  into  separate  transactions.  It  then  logs 
and  verifies  the  information,  forwards  it  to 
the  appropriate  CenterPoint  legacy  system  for 
processing,  and  sends  an  acknowledgement 
or  direction  notification  to  the  sender. 


CenterPoint  management 
can  view  dashboards  that 
monitor  business 
processes  and  drill  down 
into  individual  transactions 
if  needed. 
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Electric  Reliability  Council  ofTexas 


your  bills,  track  and  handle  service 
requests,  and  even  provide  a  feed  to  the 
outage  system,”  Rich  says.  Things  aren’t 
nearly  so  simple  anymore.  “Now  that 
same  transaction  could  go  through  50 
system  processes  in  four  separate  com¬ 
panies  before  the  order  is  actually  com¬ 
pleted.  It’s  now  very  complex"  Rich  says. 

CenterPoint  initially  selected  software 
from  SeeBeyond  to  create  an  integration 
hub  between  its  current  legacy  systems, 
the  retailers’  systems  and  ERCOT.  The 
SeeBeyond  technology  handles  the  nec¬ 
essary  data  translation,  validation,  trans¬ 
fer  and  reporting. “The  project  was  to  get 
into  the  deregulated  market  and  get  the 
transactions  in  and  out  the  door;’  Rich 
recalls. 

The  success  of  that  project  led  to  a  big¬ 
ger  role  for  the  SeeBeyond  software, 
which  today  is  the  company’s  technolo¬ 
gy  standard  for  integration  projects. 

In  January  of  this  year,  CenterPoint 
rolled  out  Version  5.0  of  SeeBeyond’s 
Integrated  Composite  Application  Net¬ 
work  (ICAN)  suite.  The  suite  consists  of 


multiple  products,  including  eGate  In¬ 
tegrator,  which  tackles  application  con¬ 
nectivity  and  data  transformation;  eBAM 
Studio,  which  generates  business  activity 
monitoring  (BAM)  applications  for  track¬ 
ing  key  metrics;  and  eVision  Studio  for 
creating  composite  Web  applications. 
This  year  the  company  is  looking  at  im¬ 
plementing  elnsight  Business  Process 
Manager,  which  handles  the  orchestra¬ 
tion  of  multi-system  business  processes. 

With  Version  5.0,  CenterPoint  is  taking 
steps  to  migrate  to  a  service-oriented 
architecture  that  will  support  a  system  of 
composite  applications  created  from 
current  legacy  applications.  The  goal  is 
to  shift  away  from  traditional  monolithic 
application  development  methods  and 
toward  a  more  flexible,  process-based 
model. 

With  real-time  analytics  and  perfor¬ 
mance  management  capabilities, the  sys¬ 
tem  lets  end  users  see  what’s  going  on 
and  monitor  transactions  from  start  to 
finish  via  a  Web  interface.  For  example, 
See  CenterPoint,  page  32 


IBM  eServer®  xSeries 


PAY  MORE  ATTENTION  TO  SERVERS 
BEFORE  YOU  BUY  THEM. 

SO  YOU  CAN  PAY  LESS  ATTENTION 


Affordable,  reliable,  easy  to  manage:  eServer®  xSeries®  with  infer  Xeon™  Processors 
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Flexible  and  easy  to  use 


IBM  eServer  BladeCenter  HS20  Express 

1 


Designed  to  improve 
performance  and  availability, 
with  a  range  of  features 
such  as  redundant  hot-swap 
power  and  cooling. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Two-way  tower  with 
rack  capability 
Up  to  9  hot-swappable 
SCSI  hard  disk  drives 
IBM  Director 

Limited  warranty:  up  to  3 
years  on-site3 

From  $2,989* 

IBfVS  Financing  Advantage 

Only  $82  per  month4 


|  Help  maximize  performance 
and  improve  availability  in  a 
rack  dense  environment  with 
Xtended  Design  Architecture." 
Includes  features  like  Calibrated 
Vectored  Cooling,  an  IBM 
innovation  that  helps  to  keep 
your  system  cool  and  improve 
uptime. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Two-way  2U  rack  server 

Up  to  16GB  DDR2  memory 
using  8  DIMM  slots 
Calibrated  Vectored  Cooling 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $3,999* 

iBIVi  Financing  Advantage 

Only  $109  per  month4 


With  the  power  of  3rd  generation 
Enterprise  X-Architecture,™  it  sets  £Q 
a  new  standard  for  4-sodket, 

64-bit  servers.  Delivers  increased 
performance,  systems  manage¬ 
ability,  and  simultaneous  support 
for  32  and  64-bit  apps. 

System  features 

Up  to  four  64-bit  Intel  Xeon 
Processors  MP  3.66GHz 
64GB  DDR  memory 
2GB  memory  expandable 
to  64G  B 

Six  64-bit  Active  PCI-X  2.0 
IBM  Director 

Calibrated  Vectored  Cooling 
Limited  warranty:  up  to  3  years 
on-site3 


From  $13,779* 

IBM  Financing  Advantage 
Only  $379  per  month4 


Designed  to  support  the  Intel 
Xeon  Processor  and  packed 
with  high-availability  features, 
the  eServer  BladeCenter 
HS20  with  industry-leading 
modular  design  delivers  density 
without  sacrificing  processor 
performance. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Up  to  14  blades  per  chassis 
Supports  both  32 

and  64-bit  applications 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $2,589* 

IBM  Financing  Advantage 

Only  $71  per  month" 


IBM  TotaiStorage® 


Simplify  storage  management  to  improve  productivity 


IBM  TotaiStorage  DS300  Express 


System  features 


Entry-level,  cost-effective  SCSI  storage  systems 
designed  to  deliver  advanced  functionality  at  a 
breakthrough  price.  Provides  an  exceptional 
solution  for  work  group  storage  applications,  such 
as  e-mail,  file,  print,  database  and  Intel  Xeon 
Processor-based  servers. 


3U  rack-mount  entry  level 
Support  for  up  to  14 

Ultra320  SCSI  disk  drives 
Starts  at  584GB  /  Scales  to  4.2TB 

From  $5,355* 


Simultaneous  support  of 
heterogeneous  operating 
system  environments  for 
xSeries  and  BladeCenter 

Limited  warranty:  1  year 
on-site3 

IBM  Financing  Advantage 

Only  $147  per  month" 


'All  prices  stated  are  IBM's  estimated  retail  selling  prices  as  of  May  3,  2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may 
vary.  Products  are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in 
other  countries.  'IBM  Director  is  not  available  on  TotaiStorage  systems,  2IBM  Director  must  be  installed.  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor  IBM  will 
attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  *IBM  Global  Financing  terms  and  conditions  and  other  restrictions  may  apply.  Monthly  payment  provided 


j 


TO  THEM  AFTER. 


With  IBM®  Express  Servers  and  Storage™ 
designed  for  mid-sized  businesses,  help  is  here. 

You’ve  already  got  a  zillion  things  that  require  your 
attention -you  shouldn’t  have  to  worry  about  your  systems. 
That’s  why  IBM  Express  products  offer  enhanced  reliability, 
which  helps  them  do  their  job  so  you  can  focus  on  yours. 

Take  IBM  Director,  for  example.1  it  proactively  notifies  you 
of  a  potential  problem -up  to  48  hours  in  advance.  Or  our 
Calibrated  Vectored  Cooling  feature  available  on  select 
xSeries  systems.  It  cools  your  system  more  efficiently. 
This  means  more  features  can  be  packed  into  a  smaller 
server.  Giving  you  more  functionality  and  greater  flexibility. 

It’s  just  an  example  of  our  self-managing  features  that  help 
you  take  back  control  of  your  IT.  Which  can  help  lower 
your  maintenance  costs,  too.  Because  with  IBM  Express 
Servers  and  Storage,  innovation  comes  standard.  It’s  not 
optional.  Plain  and  simple,  it’s  built  in.2 

There’s  also  one  more  great  feature -your  IBM  Business 
Partner.  Which  means  you  can  have  a  one-to-one  chat 
with  someone  who  understands  your  industry  and  your 
business -and  who’s  located  in  your  neck  of  the  woods. 
And  for  mid-sized  businesses,  that’s  really  big  help  in  a 
really  big  way. 
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IBM  TotalStorage  DS400  Express 

With  advanced  functionality,  the  DS400  provides 
an  exceptional  solution  for  work  group  storage 
applications.  It  supports  Intel  Xeon  Processor- 
based  servers  and  offers  Fibre  Channel  drives 
designed  for  high  performance,  and  hot-swap 
Ultra320  SCSI  drives  designed  for  high  reliability. 


System  features 

2GB  Fibre  Channel  storage 
systems  area  network  (SAN) 
3U  rack-mount  entry  level 
Starts  at  584GB  /  Scales  to  5.8TB 

From  $8,495* 


Simultaneous  support  of 
heterogeneous  operating 
system  environments  for 
xSeries  and  BladeCenter 
Limited  warranty:  1  year  on-site3 


IBM  Financing  Advantage 

Only  $234  per  month4 


is  for  planning  purposes  only  and  may  vary  based  on  customer  credit  and  other  factors.  Rates  and  offerings  are  subject  to  change,  extension,  or  withdrawal  without  notice.  IBM,  eServer. 
BladeCenter.  xSeries,  TotalStorage.  IBM  Express  Servers  and  Storage,  Enterprise  X-Architecture  and  Xtended  Design  Architecture  are  trademarks  or  registered  trademarks  of  Internationa! 
Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Intel,  Intel  Inside,  the  Intel  Inside  logo,  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or 
its  subsidiaries  in  the  United  States  and  other  countries.  Other  company,  product,  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©  2005  IBM  Corporation.  All  rights  reserved 
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The  powers  that  be  in  New  York  City 
have  concluded  that  telecom  net¬ 
works  are  at  least  as  important  to  the 
economic  vitality  of  the  city  as  the  sub¬ 
ways,  roads  and  airports.  They  also  con¬ 
cluded  that  something  needs  to  be  done  to 
improve  the  current  network  infrastructure 
and  that  the  city  needs  to  help. 

The  powers  that  be  in  this  case  are  the 
New  York  City  Economic  Development 
Corporation,  the  New  York  City  Department 
of  Information  Technology  and  Tele¬ 
communications,  and  the  New  York  City 
Department  of  Small  Business  Services. 
With  great  fanfare,  New  York  Mayor  Michael 
Bloomberg  recently  announced  that  these 


A  not-all-powerful  plan  of  action 


groups  have  developed  a  “plan  of  action” 
(see  www.networkworld.com,  DocFinder: 
7230). 

The  plan  concludes  that  parts  of  the  city 
are  in  quite  good  shape  telecom  networks- 
wise,  though  most  of  the  city  needs  help. 
But  this  plan  includes  far  less  governmen¬ 
tal  action  than  what  has  been  proposed  or 
is  under  development  in  other  places 
around  the  country 

The  plan  also  might  be  less  likely  to  pro¬ 
voke  the  same  kinds  of  armies  of  telco  lob¬ 
byists  that  are  so  successful  at  getting  state 
legislatures  to  tell  local  governments  that 
they  cannot  do  what  they  feel  is  best  for 
their  citizens. 

A  few  months  ago  1  wrote  about  the 
actions  of  one  of  these  state  legislatures  (“A 
warning  about  future  telecom  ‘reform’?” 
DocFinder:  7232)  and  about  the  Utopia 
project  (DocFinder:  7231),  an  example  of 
the  kind  of  effort  the  actions  have  tried  to 
stop. 


The  New  York  proposal  does  not  involve 
all  that  much  direct  network  building.  The 
proposal  is  to  run  fiber  to  support  some 
nonprofit  efforts  and  to  install  some  redun¬ 
dant  fiber  to  important  public  and  private 
sites  in  lower  Manhattan.The  plan  also  is  to 
install  conduits  for  carriers  to  use  as  they 
repair  streets.The  only  effort  the  city  groups 
propose  that  might  be  called  network  con¬ 
struction  is  a  rooftop  wireless  back-up  net¬ 
work  to  improve  the  reliability  of  network 
service  in  lower  Manhattan. 

The  city  groups  propose  to  use  some 
federal  development  funds  to  pay  for  these 
and  a  few  other  initiatives.  They  also  pro¬ 
pose  urging  that  network  connections  to 
office  buildings  be  made  more  reliable. 

All  in  all,  this  is  a  quite  modest  proposal. 
It  relies  more  on  encouraging  the  private 
sector  to  do  the  right  thing  than  building  it 
themselves.  In  New  York  this  seems  realis¬ 
tic.  It’s  not  clear  that  the  same  sort  of  plan 
would  work  all  that  well  in  a  place  that 


IBM 

continued  from  page  29 

collects  information  from  corporate  data 
stores  to  populate  the  database.lt  discovers 
the  underlying  infrastructure,  and  relation¬ 
ships  among  applications  and  the  network 
supporting  them.  The  software  also  can 


communicate  directly  with  point  products 
from  Cendura,  Collation,  nLayers  and 
Relicore.and  incorporate  data  collected  by 
third-party  systems  such  as  asset  manage¬ 
ment  wares  or  trouble-ticketing  tools. 

Once  the  software  is  deployed,  IT  man¬ 
agers  set  thresholds  on  which  the  software 
would  generate  events,  alerts  and  reports. 


The  software  includes  a  modeling  tool  that 
lets  users  establish  standard  IT  service 
delivery  models.lt  would  alert  IT  managers 
when  parts  of  a  process  fail,  either  on  the 
business  side  or  on  the  IT  side. 

For  Wayne  Fowler,  this  type  of  software, 
would  give  him  a  single  view  of  configura¬ 
tion  management  data  stored  on  main¬ 
frames,  in  various  Tivoli,  Peregrine  and 
Remedy  software  applications,  and  even 
Excel  spreadsheets.  The  department  man¬ 
ager  for  systems  management  and  business 
services  at  Bank  of  Montreal  Financial 
Group  in  Toronto  says  he  might  start  eval¬ 
uating  Tivoli  CCMDB  in  the  near  future. 

“We  have  pockets  of  valid  and  well-main¬ 
tained  information  and  we  wouldn’t  do 
away  with  them,  but  this  product  would  be 
federated  and  use  parts  of  all  that  informa- 


NewsQalerts 

Hate  hunting  for  stories  on  a  specific  topic?  Let  the  news  come  to  you 
with  Network  World’s  latest  news  alerts  —  with  focuses  on  security, 
financials,  standards,  trade  show  news  and  vendor-specific  news. 

today  at  www.networkworld.eom  DocFinder 
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continued  from  page  29 

users  in  SeeBeyond’s  revenue,  billing  and 
credit  departments  can  see  the  number 
of  transactions  received,  compare  current 
levels  to  historic  figures,  and  see  how 
many  transactions  have  been  processed, 
Rich  says. 

Users  also  can  go  a  step  further  and 
access  individual  transactions. “They  can 
get  down  all  the  way  into  a  transaction 
and  fix  it  if  there’s  a  functional  error,  or 
reroute  it,  or  do  a  lot  of  other  things  down 
at  the  single-transaction  level,”  Rich  says. 

By  giving  end  users  greater  visibility 
into  transactions  —  as  well  as  control 
over  those  transactions  —  it  cuts  down 
on  the  amount  of  manual  effort  required, 
Rich  says.  In  the  past,  identifying  and 
resolving  individual  transaction  errors 
was  a  time-consuming  chore  for  end 


II  We  process  500,000 
transactions  a  day.  Just  a 
1%  error  is  an  unmanage¬ 
able  figure  of  errors.  11 

Mary  Rich 

IT  manager,  CenterPoint  Energy 


users  and  IT  staff.  If  a  transaction  error 
occurred,  someone  had  to  query 
CenterPoint’s  databases  to  extract  trans¬ 
action  data  and  dig  through  it  to  find  the 
error’s  source,  and  then  contact  the  IT 
team  to  make  the  appropriate  change  in 
the  database  directory 
There  was  a  lot  of  e-mail  back  and  forth 
between  IT  and  users,  Rich  says.  With  the 
SeeBeyond  technology,  end  users  can 


make  corrections  without  requiring  IT 
assistance. 

Real-time  analytic  capabilities  help 
CenterPoint  spot  and  resolve  transaction 
problems  much  more  quickly,  which 
makes  business  users  more  proactive 
than  reactive,  Rich  says.  That’s  important 
with  a  transaction  processing  network 
the  size  of  CenterPoint’s.  “We  process 
500,000  transactions  a  day  Just  a  1%  error 
is  an  unmanageable  figure  of  errors,”  Rich 
says. 

One  advantage  of  using  a  common 
platform  for  integration  and  process 
monitoring  is  that  IT  staff  have  honed 
their  SeeBeyond  expertise.“When  a  prob¬ 
lem  is  presented  to  us,  we  can  figure  out 
how  to  get  it  resolved  in  SeeBeyond,”  Rich 
says,“It  cuts  down  on  support  personnel, 
it  makes  operating  costs  a  lot  cheaper, 
and  it  allows  us  to  utilize  the  SeeBeyond 
tools  to  their  fullest  extent.”* 
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does  not  have  a  current  base  of  technol¬ 
ogy-intensive  companies  as  strong  as  New 
York’s.This  is  why  the  trend  of  state  legisla¬ 
tures  genuflecting  in  the  direction  of  local 
telephone  companies  is  such  a  problem. 

Limiting  the  ability  of  municipalities  to 
install  their  own  wireless  or  fiber  infra¬ 
structures,  if  they  come  to  the  conclusion 
that  it  would  be  better  for  their  own  eco¬ 
nomic  vitality  puts  states  and  municipali¬ 
ties  at  an  economic  disadvantage.  Maybe 
the  local  monopoly  telephone  company 
will  step  up  to  the  task  in  a  reasonable  time 
period  and  offer  service  at  a  reasonable 
price.Then  again,  maybe  pigs  will  soon  fly 

Disclaimer:  I  expect  that  the  aerodynam¬ 
ic  theoreticians  at  Harvard  would  say  that 
pigs  can’t  fly  (unless  dropped),  but  I  did 
not  ask  about  that  or  municipal  networks. 

Bradner  is  a  consultant  for  Harvard 
University's  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 


tion  to  help  us  automate  how  a  change  on 
a  server  relates  to  a  problem  with  an  appli¬ 
cation  and  then  update  the  configuration 
database,”  he  explains.  “Right  now,  it’s  a 
bunch  of  people  in  a  room  talking  about 
[how  changes  impact  performance]. 
Software  that  could  automate  parts  of  that 
process  would  drive  more  efficiency  and 
costs  down.” 

Tivoli  CCMDB  also  will  be  the  foundation 
for  new  IBM  Tivoli  Process  Managers,  pre¬ 
packaged  applications  that  focus  on 
release,  availability  and  information  life- 
cycle  management. 

For  example,  the  release-management 
application  would  instruct  customers  on 
how  to  prepare  to  distribute  an  application 
release.  The  software  would  integrate  with 
products  such  as  IBM  Tivoli  Provisioning 
Manager  and  IBM  Tivoli  Configuration 
Manager,  and  trigger  the  automatic  distrib¬ 
ution  of  packages  using  the  pre-defined 
process  laid  out  in  Tivoli  Process  Manager. 
The  applications  come  with  sets  of  best 
practices  but  can  be  customized  to  a  com¬ 
pany’s  specific  processes  or  vertical  indus¬ 
try  needs. 

IBM  aligned  its  best  practices  with  those 
of  the  Information  Technology 
Infrastructure  Library  or  ITIL,  v/hich  pro¬ 
vides  guidelines  for  instituting  processes 
around  change,  availability  problem  and 
configuration  management,  for  example. 

To  add  efficiency  and  lower  costs,  Fowler 
says  Bank  of  Montreal  Financial  Group  also 
adopted  ITIL  best  practices  and  says  IBM’s 
support  has  him  considering  an  upgrade  to 
his  Tivoli  software  deployment. 

“We’ve  made  a  heavy  investment  in  ITIL 
We  wouldn’t  even  be  talking  with  them  if 
they  didn’t  support  ITIL,”  he  says. 

IBM  also  upgraded  14  products  to  inte¬ 
grate  and  share  data  with  the  new  manage¬ 
ment  database  software.  All  products  are 
scheduled  to  be  available  by  the  fourth 
quarter.  Pricing  will  be  set  then  when  the 
products  become  available,  IBM  says.* 
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SWITCH  TO  POSTINI.  THE  SMART  MOVE 


PREEMPTIVE  EMAIL  PROTECTION 


SWITCHING  TO  POSTINI  WAS  THE 


WE  COULD  DO  TO  STOP  SPAM 


At  World  Wildlife  Fund,  we  were  overwhelmed  with  spam  and  knew  we  had  to  act.  We 
tried  another  managed  service  but  ran  into  problems  and  disruptions.  Then  we  switched 
to  Postini.  Sr  art  move. 


444744222  Tj, k'V \ ■  • 


Now  we  protect  email  at  our  Washington  DC  headquarters  and  several  of  our  field 
offices  around  the  world  with  Postini’s  patented,  secure  email  boundary  services.  We’re 
still  outsourcing  our  email  security  saving  time,  money  and  bandwidth  only  now  we 
have  th  best:  Postini. 


GREGORY  SMITH.  VICE  PRESIDENT  AND  CIO,  INFORMATION  TECHNOLOGY 

WORLD  WILDLIFE  FUND,  WASHINGTON  DC 
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L]  1..  ©Copyright  2005.  Postini.  and  the  Postini  logo  are  registered  trademarks  of  Postini.  Inc  All  other  trademarks  listed  in  this  document  are  the  property  of  their  respective  owners. 
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Server  clustering  and  virtualization  give  users  a 
better  road  to  dependability. 


jyym^l^^Continuoas  data 
takes  apps  back  to  any  point  In  time 


recovery. 


MPLS  DONE  RIGHT 


Early  adopters  share  tips  on  making  MPLS  truly 
fail-safe. 


YOUR  OPINION: 
TALK  IT  UP 


Disaster-recovery  tactics  get 
the  floor  in  this  ongoing  roundtable  series  among 

as 


Beyond  business  continuity,  this  special  supple¬ 
ment  examines  other  new  data  center  trends: 


THE  NEW  DATA 
CENTER  BY  THE  NUMBERS 


,  new 


■  technologies  rate  high  with  readers. 


:’s  Austin  facility  wins  a  New 


•  Award  for  grid  ose  and  more. 


THE  LAST  PIECE 
FILLING  THE  APP  GAP 


preneur  Bill  Coleman  discusses  the  promise  of 
automated  application  management 


Tech  entre- 


The 


business  continuity 

Savvy  strategies  for  the  emerging  new 


DAN  PAGE 


A  look  ahead  to  the  other  pieces  of  the 
2005  New  Data  Center  series: 


■  BY  JOANNE  CUMMINGS 


Gone  are  the  days  when  a  comprehensive  business-continu¬ 
ity  plan  meant  mailing  back-up  tapes  to  a  hot  site  a  few 
miles  away  Today,  businesses  are  always  on,  running  at 
break-neck  speed  24/7.  And  their  business-continuity  plans 
need  to  reflect  that  reality. 

“If  we’re  not  getting  data  from  our  customers,  we  can’t  run  our  business,” says  Jeff  Flanigan,  director  of  IT  infra¬ 
structure  at  E-gatematrix,  an  Atlanta  company  that  tracks  and  stocks  meals,  headsets,  blankets  and  other  ser¬ 
vice  items  for  major  airlines  around  the  world. “There  are  airplanes  in  the  sky  24/7,  and  we’re  always  either 
loading  aircraft  or  getting  ready  for  aircraft  to  come  in.  It’s  a  nonstop  process.  We  can’t  be  down,  and  our 
disaster-recovery  plans  have  to  take  that  into  account.” 
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Fortunately,  new  data  center  technologies,  such 
as  business  process  monitoring,  continuous  data 
protection  and  virtualization,  are  emerging  to 
make  recovering  such  environments  easier  and 
more  cost-effective.  Experts  and  users  who  have 
built  successful  business-continuity  plans  offer  the 
following  best  practices  for  business  continuity  in 
the  era  of  the  new  data  center. 

1.  Tier  applications  by  criticality.  Today’s  organi¬ 

zations  are  becoming  increasingly  data-intensive 
and,  as  a  result,  the  amount  of  data  they  potentially 
need  to  recover  quickly  can  become  overwhelm- 
ing.“Up  until  now,  many  companies  aimed 
to  recover  absolutely  everything  in  one  fell 
swoop,”  says  Michael  Cray  director  of  busi¬ 
ness-continuity  solutions  at  Forsythe 
Technology,  an  IT  consultancy  “But  that’s  just 
not  feasible  anymore  because  most  organi¬ 
zations  have  too  much  data,  too 
many  applications  and  too  many 
interdependent  processes.”  :M 

The  solution  is  to  take  a  holis-  jjm 
tic  view  of  the  business  and 
bring  back  only  the  most  critical 
applications  right  away.  “It  is  not  i 
always  feasible  to  bring  every¬ 
thing  back  straightaway?’  says  Penny 
Turnbull,  senior  director  for  crisis  management 
and  business-continuity  planning  at  Marriott 
International,  in  Washington,  D.C.“If  you  don’t  need 
certain  things  immediately  you  can  be  wasting 
time,  effort  and  money  planning  for  their  recovery. 
And  that’s  what  business-continuity  planning  is  all 
about:  Knowing  the  must-haves,  because  you  can’t 
recover  everything.” 

Marriott  has  built  an  enterprise  business-conti¬ 
nuity  framework  that  guides  users  through  the 
process  of  deciding  business  process  and  applica¬ 
tion  criticality  and  tailoring  continuity  plans 
accordingly.  “You  need  to  put  applications  into 
context  because  this  isn’t  business  as  usual,” 
Turnbull  says. 

2.  Weigh  criticality  against  overall  cost.  In  some 
cases,  business-continuity  planners  need  to  weigh 
even  the  most  critical  applications  against  the 
overall  cost  of  recovering  them  after  an  incident. 

“You  can  create  any  solution  if  you  have  enough 
money?’  E-gatematrix’s  Flanigan  says.“But  in  a  lot  of 
situations,  you  don’t  have  to.” 

Instead  of  instantaneous  recovery,  E-gatematrix 
realized  it  could  get  by  on  a  four-hour  window  for 
getting  its  most  critical  applications  up  and  run¬ 
ning  after  a  disaster,  he  says.  “Just  because  the 
technology  is  available  to  get  everything  back 
right  away  doesn’t  mean  my  business  can  afford  it. 
I  try  to  craft  the  solution  that  best  fits  the  needs  of 
the  business  and  go  from  there,”  he  says. 

3.  Buy  with  an  eye  toward  business  continuity. 


Editor:  Beth  Schultz 

Executive  editor:  Julie  Sort 

Designer:  Brian  Gaidry 

Managing  editor,  fusion:  Melissa  Shaw 

Online  graphic  designer:  Eric  Andersen 

Copy  editor:  Kyle  Connors 

Network  World  editorial  director:  John  Gallant 

Network  World  editor  in  chief;  John  Dix 


Savvy  organizations  virtually  never  purchase  tech¬ 
nology  for  disaster  recovery  alone.  Today,  compa¬ 
nies  can  leverage  most  new  data  center  technolo¬ 
gies  in  building  robust,  just-in-time  business-conti¬ 
nuity  plans. 

The  Chicago  Tribune,  for  example,  has  consoli¬ 
dated  its  critical  applications  onto  two  Sun  Fire 
15K  servers,  located  on  opposite  sides  of  town, 
says  Pete  Mashek,  director  of  production  systems 
at  the  newspaper.  It  links  those  servers  via  AT&T 
fiber  and  Nortel  metropolitan  Ethernet  switches. 
The  whole  point  was  to  build  more  reliability  into 
the  production  systems,  but  the  company  also 
made  huge  strides  in  business  continuity. 

“We  needed  to  upgrade  anyway,  so  it  made  sense 
for  us  to  take  disaster  recovery  into  account  while 
we  were  at  it,”  Mashek  says.  “From  a  purely  finan¬ 
cial  point  of  view,  disaster  recovery  is  a  cost.  But 
when  you’re  buying  new  equipment  and  putting 
in  new  architectures  to  support  the  business  any¬ 
way  you  can  mitigate  the  disaster-recovery  costs  at 
the  same  time.” 

For  the  Tribune,  the  result  is  an  active-active  clus¬ 
tering  solution  that  supports  day-to-day  business 
and  offers  less  than  a  second  of  downtime  when  a 
disaster  affects  one  center. 

4.  Emphasize  the  “business”  in  business  conti¬ 
nuity.  “Business  continuity  can’t  be  a  one-off  any¬ 
more,”  Forsythe’s  Croy  says.“It  should  be  an  integral 
part  of  day-to-day  business.” 

This  means  evangelizing  continuity  across  the 
business  so  that  not  only  is  it  taken  into  account 
each  time  a  new  system  or  application  is  brought 


online,  but  also  so  that  business  expectations  and 
actual  systems  availability  align  appropriately. 
“There  can  be  an  awful  lot  of  assumptions  made 
about  what’s  backed  up,  what’s  protected,  what’s 
recoverable,  how  quickly  and  who’s  going  to  do  it,” 
Marriott’s  Turnbull  says.  “It’s  only  when  you  sit 
down  and  talk  it  through  that  you  find  the  gaps.” 

Ensuring  ongoing  discussions  between  the  busi¬ 
ness  units  and  Information  Resources  (Marriott’s 
technology  department)  is  a  core  part  of  her  job, 
Turnbull  says.The  goal  is  making  sure  assumptions 
are  correct  and  eveiyone  is  clear  on  their  roles 
and  responsibilities. 

“The  business-continuity  planning  discipline  has 
changed  so  much  in  the  last  few  years.  It  used  to 
be  much  more  technology-focused.  Now  it  needs 
to  be  far  more  comprehensive,”  she  says.“You  need 
to  go  beyond  technology  to  look  at  the  whole 
business  —  the  people,  facilities,  assets,  reputation 
and  brand  image,  and  so  on.  It  has  to  become  part 
of  everyday  operations.” 

5.  Don’t  get  enamored  with  technology.  Some¬ 
times  a  company  can  support  critical  business 
processes  with  plans  that  involve  simple  paper- 
based  procedures  or  focus  on  more  important 
assets,  such  as  people.“Bottom  line,  it  is  important 
to  recognize  which  business  processes  can  go 
manual, ’’Turnbull  says. 

At  Marriott,  this  emphasis  on  the  bigger  picture 
of  business  continuity  as  opposed  to  simply  a  tech¬ 
nology-centric  view,  was  underscored  during  the 
Sept.  1 1  terrorist  attacks,  Turnbull  says.  Sept.  1 1 
“highlighted  the  importance  of  people,”  she  says. 
“You  can  recover  all  the  systems  you  want  in  the 
world,  but  if  you  don’t  have  people  to  operate  and 
utilize  them,  then  why  are  you  recovering? 
Business  continuity  is  more  than  that.” 

Cummings  is  a  freelance  writer  in  North  Andover, 
Mass.  She  can  be  reached  at  jocummings @ 
comcast.net 
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Introducing  DuPont™  certified  limited  combustible  cable.  In  the  event  of  a  fire,  securing  your 
business’  uptime  is  crucial.  The  data  communications  cable  you  choose  could  play  a  key  role  in 
protecting  your  network  technology  investment.  DuPont™ certified  cable  produces  20  times  less  smoke 
than  other  plenum  rated  cables.  And  less  smoke  means  less  costly  downtime,  making  it  the  most 
advanced  fire  safety  cable  technology  available  today.  To  learn  more  about  DuPont ™  certified  limited 
combustible  cable  or  to  request  a  free  CD,  log  on  to  teflon.com/cablingmaterials  or  call  1-800-207-0756. 
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Downtime 


Server  clustering  and 
road  to  dependability. 


■  BY  JENNIFER  MEARS 


virtualization  give  users  a  better 


U  U  « 


When  MLT  Vacations  scrapped  its 

pricey  Sun  hardware  for  a  cluster  of 
IBM  Linux  blade  servers  to  support 
its  Oracle  database,  it  expected  to 
see  savings.  But  the  company  got  something  even  more:  a 


database  environment  it  truly  could  depend  on  24/7. 

That  was  “icing  on  the  cake,”  says  Chris  Corona,  manager  of  systems  services 
for  the  online  provider  of  travel  packages,  in  Edina,  Minn. 

Emerging  clustering  and  virtualization  technologies  can  bring  high-end  capa¬ 
bilities  to  low-priced,  standards-based  servers  that  have  been  pumped  up  with 
performance  and  reliability  improvements.  In  turn,  IT  managers  get  a  wider 
choice  when  it  comes  to  mapping  business  continuity  plans.  Many  like  Corona, 
are  finding  that  the  tools  they’ve  selected  to  make  the  data  center  more  dynam¬ 
ic  —  and,  interestingly  to  cut  costs  —  are  creating  a  more  reliable  environment 
to  support  critical-business  processes.  Should  a  failure  occur,  applications  that 
aren’t  tied  to  the  hardware  on  which  they  run  easily  can  be  moved  from  one  vir¬ 
tual  server  to  another  or  within  a  cluster. 

“When  you  thought  about  business  continuity  you  used  to  think  replicated 
servers,  replicated  data  and  separate  physical  machines,”  says  Joe  Clabby,  an 
analyst  with  Summit  Strategies.“Now  you  think  resource  pool.” 

At  International  Truck  and  Engine,  a  Warrenville,  Ill.,  manufacturer,  IT  Manager 
Barry  Naber  keeps  applications  running  smoothly  using  VMware’s  VMotion. This 
tool  lets  users  move  virtual  machines  among  physical  servers. 

“We  brought  VMware  in  for  server  consolidation  and  realized  it’s  much  big¬ 
ger  than  that.  It’s  also  business  continuity”  Naber  says.  “With  VMotion,  if  one 
server  within  our  VMware  farm  is  getting  hit  more  heavily  than  the  others,  we 
can  move  users  over  to  another  server  unbeknownst  to  them  and  allow  the 
application  to  function  without  having  to  take  the  server  down.  Before,  end 
users  would  have  experienced  an  outage.” 

International  Truck  and  Engine  has  about  150  VMware  partitions  running  on 
less  than  a  dozen  servers.The  company  has  avoided  about  $1  million  in  hard¬ 
ware  costs,  Naber  says. 

The  tech  choices 

While  VMware,  now  an  EMC  company  largely  created  the  virtualization  market 
for  x86  servers,  others,  such  as  Microsoft,  SWsoft  and  the  open  source  virtualiza¬ 
tion  project  Xen,  now  offer  alternatives.  IBM,  HP  and  Sun  also  provide  tools  to 
make  virtualization  and  clustering  simpler  to  deploy  in  enterprise  data  centers. 
And  clustering  tools  aimed  at  making  it  easier  to  tie  together  disparate  systems 
are  available  from  companies  such  as  Ernie  Networks,  Neverfail  Group,  Penguin 
Computing,  PolyServe  and  Qlusters. 

“What  you’ll  see  is  more  and  more  integration  of  all  these  types  of  tech¬ 
nologies,  which  lend  themselves  to  more  choice  and  more  capabilities  with¬ 
in  the  IT  infrastructure  for  doing  business  continuity” says  Jim  Sangster,  direc¬ 
tor  of  N1  and  availability  marketing  for  Sun.  “What  typically  has  only  been 
available  on  mainframe-class  systems  —  well,  now  we  can  do  it  on  a  cheap 
little  Opteron  box.” 

The  move  to  Linux  and  Intel-based  systems  is  expected  to  save  MLT  Vacations 
as  much  as  $1  million  over  the  next  five  years,  Corona  says.  Maybe  more  impor¬ 
tantly  with  the  Linux-based  cluster,  which  uses  PolyServe  on  the  back  end  to  man- 


Now  .  .  .  get  tin  j  back 
online  takes  as  long  as 
it;  does  to  restart;  the 
application,  which  can 
be  done  remc  ;ely  in 
about  15  minute  s. 


-  CHRIS  CORONA,  manager  of  systems  seryices, 
MLTVacati  is 


age  the  distribution  of  data  across  the  server  nodes,  the  company  says  it  hopes 
eventually  to  eliminate  downtime  altogether. 

“The  way  things  worked  before,  if  we  had  an  outage  in  a  database  server,  we 
were  probably  looking  at  anywhere  from  two  to  four  hours  of  downtime,” 
Corona  says.  “Now,  as  long  as  there  is  one  node  up  and  running,  getting  back 
online  takes  as  long  as  it  does  to  restart  the  application,  which  can  be  done 
remotely  in  about  15  minutes.”  During  the  next  year,  Corona  plans  to  make  the 
reservation  application  cluster-aware  “so  it  can  reconnect  on  failure,”  he  says. 

The  need  to  reconnect  upon  failure  is  what  led  online  mail  order  pharmacy 
CanadaDrugs.com  to  clustering  on  low-cost  Linux  servers,  says  Curtis  Ander¬ 
son,  IT  director  at  the  Winnipeg,  Manitoba,  company.  As  a  Microsoft  user,  the 
company  had  faced  outages  weekly. Today  it  uses  Ernie’s  high-availability  clus¬ 
tering  software  to  keep  Linux  applications  up  and  running. 

“We  didn’t  really  have  a  business-continuity  plan  before  we  brought  in  the  clus¬ 
ter;”  Anderson  says.  Downtime  was  costing  CanadaDrugs.com  about  $50,000  per 
week,  he  says. 

“Now  that  the  application  is  distributed  across  multiple  nodes  and  clustered, 
it  gives  you  more  options”  when  it  comes  to  business  continuity  Anderson  says. 

Wayne  McDilda,  senior  security  analyst  for  Mirage  Networks  in  Austin, Texas, 
and  a  member  of  HP’s  Encompass  user  group,  says  IT  managers  looking  for 
options  are  zeroing  in  on  these  new  virtualization  and  clustering  technologies 
as  they  move  toward  utility  computing. 

“As  different  platforms  evolve  and  become  more  mature,  the  focus  on  the 
hardware  and  applications  is  de-emphasized,”he  says.“You’re  more  focused  on 
the  actual  business  you’re  trying  to  conduct  and  therefore  the  continuity  of 
that  business. . . .  You  no  longer  care  what’s  in  the  background,  you  just  need 
that  business  service  to  be  available.”  ■ 


THE  BRAINS  TO  BACK  IT  UP. 


A  lot  of  products  claim  to  reduce  the  complexity  and  cost  of  enterprise 
backup.  But  one  actually  delivers — the  Scalar®  i2000,  part  of  the  growing 
iPlatform™  family  from  ADIC,  the  leading  provider  of  tape  libraries  for 
open-systems  backup.  * 

Embedded  intelligence.  The  Scalar  i2000  is  the  first  library  to  integrate 
advanced  management  functions — proactive  monitoring,  built-in  partitioning, 
automated  diagnostics,  and  I/O  management — so  it  delivers  faster  and  more 
reliable  backup  and  uses  less  of  your  budget,  time,  and  staff. 

Faster  resolution ,  fewer  service  calls.  Smarter  diagnostics  and  dedicated 
service  teams  mean  fewer  interruptions  and  faster  resolution.  The  Scalar 
i2000  requires  half  the  service  calls  of  conventional  libraries.  And  the 
worldwide  ADIC  service  team  solves  problems  before  customers  see  them. 

Capacity  on  demand.  As  its  name  suggests,  the  Scalar  i2000  is  designed  to 
scale  with  your  storage  needs.  So  you  don't  have  to  worry  about  running  out 
of  space  or  paying  for  more  than  you  need. 

After  all,  you  were  hired  to  use  your  brains  for  more  important  things. 

‘Market  share  from  Gartner  Dataquest,  Tape  Automation  Systems  Market  Shares,  2003,  F.  Yale,  April  2004. 


Visit  www.adic.com/i2k  to  get  your  free  Aberdeen  Group  white  paper: 

Taking  an  Intelligent  Step  Forward  in  Tape  Backup  and  Restore. 


Intelligent  Storage 


TM 


Available  through  EMC  Corporation,  your  complete  source  for  information  lifecycle 
management  solutions.  Call  your  local  ADIC  or  EMC  sales  representative  for  more  information. 

Copyright  2005  Advanced  Digital  Information  Corporation  (ADIC),  Redmond,  WA,  USA.  All  rights  reserved.  Created  in  USA. 
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Continuous  data  protection  takes  apps  back  to 
any  point  in  time  for  unbeatable  recovery. 

■  BY  DENI  CONNOR 
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al  Weiss,  senior  systems  engineer  for  Baptist  Memorial 
Health  Care,  needed  to  save  time  and  get  at  data  faster. 
Using  traditional  back-up  and  recovery  software, backing  up 
two  Windows  servers  supporting  a  business-critical  applica¬ 
tion  and  image  files  was  taking  as  many  as  1 1  days. 


That  meant  the  Memphis, Tenn.,  healthcare  system 
never  really  had  a  handy  data  source  to  restore  from, 
Weiss  says.  Whenever  Baptist  needed  to  use  the 
back-up  resource,  it  had  to  run  massive  log  file 
changes  and  do  multiple  restores,  he  explains. 

After  evaluating  a  variety  of  software,  Weiss  found 
just  what  he  needed  —  a  new  form  of  backup  and 
recovery  called  continuous  data  protection  (CDP). 
Available  from  start-ups  such  as  Mendocino 
Software,  Revivio  and  Storactive,  CDP  products  offer 
a  time-sensitive  approach  to  backing  up  and  recov¬ 
ering  data.  With  CDP  a  record  of  every  change  to 
data  is  written  to  disk. This  makes  it  possible  for  CDP 
software  to  return  any  application,  database  or  file 
system  to  any  previous  point  in  time  or  process. 

Using  Revivios  Continuous  Protection  System 
(CPS)  1200,  one  of  the  first  CDP  products  on  the  mar¬ 
ket  along  with  Mendocino’s  TimeSpring,  backups  are 
now  a  breeze  at  Baptist.  “Now  I  can  literally  restore 
the  application  and  image  files  within  seconds 
instead  of  days,”  says  Weiss,  adding  that  this  saves  IT 
staff  time  and  the  company  money 

Now  Weiss  is  testing  out  the  CPS  1200  with  a  finan¬ 
cial  application  that  he  must  shut  down  before  run¬ 
ning  a  backup.  “The  only  time  we  can  do  a  backup 
on  that  system  is  at  midnight  when  all  the  users  are 
off  the  system,”  he  says.“The  application  can  be  shut 
down  and  we  can  do  a  cold  backup,  so  we  only  have 
a  backup  we  can  go  to  every  24  hours.” 

With  CDRWeiss  could  back  up  the  application  con¬ 
tinuously  and  give  users  access  to  current  informa¬ 
tion  should  the  application  fail.“Based  on  the  testing 
we’ve  been  doing,  we  could  actually  get  everything 
back  up  and  running  within  15  minutes, ’’Weiss  says. 

In  users'  hands 

Like  Revivios  CPS,  most  CDP  packages  focus  on 
recovering  applications,  databases  and  files  and  rely 
on  the  system  administrator  to  recover  users’  client- 
side  data.  But  Storactive’s  LiveBackup  for  PCs  lets 
administrators  or  users  recover  lost  files  from 
Windows  desktops  orservers.Microsoft,too,will  offer 
recovery  by  administrators  or  users  when  it  ships  its 
Data  Protection  Manager  later  this  year. 

The  National  Renewable  Energy  Laboratory 
(NREL)  uses  Storactive’s  CDP  software  to  back  up 


600  desktop  PCs  at  the  Golden,  Colo.,  organization. 
Previously,  the  lab  used  traditional  back-up  software 
— Veritas  Software’s  Backup  Exec  —  to  protect  these 
desktops.  Because  NREL  is  a  governmental  agency 
users  are  required  to  change  their  passwords  every 
three  to  six  months.That  meant  that  two  to  four  times 
a  year,  the  IT  staff  had  to  modify  600  scripts  for  sched¬ 
uled  desktop  backups  or  the  back-up  operation 
wouldn’t  work,  explains  Todd  Wessels,  a  systems  engi¬ 
neer  at  the  lab. 

“Eighty  percent  of  our  data  is  sitting  at  the  desktop 
level.  A  lot  of  it  is  really  valuable  data  —  if  a  re¬ 
searcher  were  to  lose  a  hard  drive,  it  would  be  cata¬ 
strophic,”  Wessels  says.  “Using  LiveBackup  for  PCs, 
researchers  can  recover  their  own  files."  He  also  says 
that  this  not  only  lets  them  get  back  data  faster  but 
without  asking  for  help  from  IT. 


With  positive  results  coming  from  early  adopters 
such  as  Baptist  and  NREL,  interest  in  CDP  is  growing 
fast  —  and  that  has  the  big  storage  and  back-up  ven¬ 
dors  closely  looking  at  the  technology  EMC  and 
Veritas  have  announced  their  intentions  to  intro¬ 
duce  CDP  software,  and  just  last  month  Network 
Appliance  acquired  Alacritus  Software,  a  start-up 
with  a  CDP  product. 

CDP  will  supplement,  not  replace,  traditional  back¬ 
up  and  recovery  products  such  as  EMC  Legato’s 
Networker  and  Veritas’  Backup  Exec.  Corporations 
still  will  rely  on  such  tools,  which  store  data  to  disk 
or  tape  on  a  scheduled  basis,  for  long-time  data 
archiving.  *• 

But  no  doubt,  CDP  and  its  disk-based  backup  is  the 
future  for  data  protection  of  both  servers  and  work¬ 
stations  on  the  network,  analysts  say  “It  seems  highly 
likely  that  all  of  the  major  strategic  vendors  will  have 
CDP  offerings  in  the  next  24  months. It’s  hard  to  imag¬ 
ine  a  scenario  where  this  is  not  the  case,”  says  Brad 
O’Neill, senior  analyst  atTaneja  Group. 

“Without  any  point-in-time  recovery  you  cannot 
establish  higher-level  application  integrated  recov¬ 
ery  schema,”  O’Neill  adds.  “For  that  reason  alone, 
there  is  no  question  that  CDP  will  have  a  fundamen¬ 
tal  role  in  future  data  centers.”  ■ 


Continuous  backup  bonanza 

A  sampling  of  the  vendors  that  offer  continuous  data  protection. 


Product 


Implementation  Des 


Network  Appliance’s 
Chronospan 

Host- based 
software. 

Will  provide  Windows,  Linux  and 
Unix  support  for  databases,  file 
systems  and  other  data. 

In  beta  now/price 
based  on  amount  of 
data  protected. 

Mendocino  Software's 
RealTime 

Host-based 

software. 

Protects  database,  file  and 
application  servers. 

Now/starts  at 
$50,000. 

Microsoft’s  Data 
Protection  Manager 

Host-basod 

software. 

WiiS  support  Windows  file  servers 
only;  will  let  users  recover  files. 

Second  half  of  2(505/ 
pricing  unavailable. 

Mimosa  Systems' 
NearPoint 

Host-based 

software. 

Specifically  for  Exchange 
databases. 

In  beta  now/pricing 
unavailable. 

Rovivio’s  Continuous 
Protection  System 

Hardware  and 
software,  includes 
storage  capacity. 

Supports  databases,  fit©  system® 
and  other  data;  Is  operating 
system  and  data  agnostic. 

Now/$250,OQ0, 

Storactive’s  LiveBackup 
for  PCs 

Host-based 

software. 

Backs  up  Windows  PCs  and  lets 
users  recover  PCs. 

Now/$25-$75  per 
user. 

Storactive’s  LivoServ  for 
Exchange 

Host-based 

software. 

Specif  icaSly  for  Exchange 
databases. 

Now/$1,995.  per 
Exchange  agent 
and  25  users. 

TimeSpring's  TimeData 

Host-based 

software. 

Recovers  applications  and 
transaction-oriented  data. 

Now/starts  at  $1,300 
per  file  server. 

XOsoft’s  Enterprise 
Rewinder 

Host-based 

software. 

Backs  up  Exchange,  SQL  Server 
and  Oracle  environments. 

Now/starts  at 
$25,00(3. 

This  is  what  we  have  in  mind  for  your  WAN. 


Most  applications  and  protocols  were  designed  to  run  locally.  Over  a  WAN,  they  grind  to  a  halt. 
That's  why  Riverbed  developed  a  solution  built  on  radically  new,  patent-pending  technology  that 
actually  delivers  LAN-like  performance  across  your  WAN,  Even  for  chatty  applications  that  can 
break  down  across  the  most  robust  networks. 


Riverbed's  proven  solution  allows  your  enterprise  to  consolidate  IT  infrastructure  at  the  data 
center,  optimize  your  bandwidth  usage,  and  still  deliver  applications  and  data  over  your  WAN  - 
at  speeds  that  make  remote  data  feel  local. 


We're  so  confident  that  Riverbed  can  improve  your  WAN  application 
performance,  we'll  even  let  you  try  it  for  30  days,  risk-free.  Call 
us  at  1 -87-RIVERBED  to  get  started  right  away,  or  visit 

www.riverbed.com/NW  today. 
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The  New  Data  Center 


How  to  make  the  most  of  this  robust  WAN  technology. 


■  BY  DEB  RADCLIFF 


When  faced  with  recovery 

after  the  Sept.  11  terrorist 
attacks,  Syed  Ghaus  had  to 
reroute  his  users  to  a  New 
Jersey  branch  office  so  they 
could  access  the  corporate  network  using  dial-up  connec¬ 
tions  from  laptops.  With  a  private  Multi-protocol  Label 
Switching-based  network,  he  says,  failover  would  have  hap¬ 
pened  seamlessly 


For  Ghaus,  who  has  since  joined  Resun  Leasing,  MPLS  has  become  a  facet  of 
business  continuity  The  flexible,  decentralized  routing  structure  of  MPLS  allows 
connectivity  among  34  branch  offices  in  the  U.S.  without  requiring  routing 
through  a  hub,  says  Ghaus,  who  is  director  of  business  technology  at  the  Dulles, 
Va.,  supplier  of  modular  buildings. Thus,  MPLS  eliminates  the  single  point  of  fail¬ 
ure  found  in  traditional  spoke-and-wheel  networks. 

This  any-to-any  connectivity  presents  a  great  opportunity  for  redundancy  and 
seamless  transition  to  back-up  systems  and  applications  at  other  locations.  But  as 
with  any  new  technology  early  adopters  warn,  MPLS  comes  with  trade-offs.  And 
without  proper  planning,  MPLS  can  create  more  problems  for  business  continuity 
than  it  solves. 

Scott  Fteterson,  director  of  network  services  for  Accenture,  points  to  standards  as 
one  weak  point.  MPLS  is  still  new,  so  standards  for  vendor  peering  and  multi-car¬ 
rier  QoS  only  now  are  making  service-level  agreements  (SLA)  achievable.  So 
while  you  might  have  a  strong  MPLS  network  out  in  the  WAN  cloud,  you  could 
have  trouble  with  last-mile  local  connections,  he  says. 


Planning  for  the  apps 

Defining  how  mission-critical  applications  are  transported  over  the  MPLS  infra¬ 
structure  becomes  highly  important  because  of  IP’s  nebulous  nature,  Peterson 
says.  So  you  must  take  the  time  to  map  the  IP  infrastructure  with  performance  and 
end-to-end  management. “Then  you  can  achieve  a  continuous  quality  of  service 
across  the  infrastructure,  into  your  data  centers  and  remote  facilities,  and  pass  it 
off  into  the  cloud”  for  the  carrier  to  uphold,  he  says. 

IT  departments  already  should  know  the  applications  most  critical  to  the  busi¬ 
ness  and  how  they’re  being  used.  So  defining  QoS  should  be  easy  But  to  make 
your  MPLS  network  even  more  fail-safe, you  should  take  the  opportunity  to  stan¬ 
dardize  platforms,  applications  and  versions,  suggests  Jermaine  Mason,  IT  manag¬ 
er  at  Wilson’s  Sporting  Goods,  a  division  of  Ameri  Sports  in  Chicago. 

Then  you  need  to  select  a  carrier  that  can  guarantee  end-to-end  service  quality 
The  carrier  also  should  be  able  to  accommodate  security  requirements  (primar¬ 
ily  IP  VPN)  and  support  new,  demanding  applications  (such  as  VoIP  and 
videostreaming)  with  minimal  latency  early  adopters  say 
Large  carriers  offer  two  ways  to  allocate  bandwidth  —  static  and  dynamic.  MCI, 
for  example,  offers  committed  access  rate  for  static  bandwidth  allocation  and  sup¬ 
ports  differentiated  services  for  dynamically  allocating  bandwidth  to  applications 
that  otherwise  would  be  affected  by  link  failures  or  congestion.  Some  carriers 
offer  the  ability  to  directly  run  over  the  Internet  using  a  VPN,  which  most  compa¬ 
nies  chose  for  better  privacy  and  reliability 
But  not  every  carrier  supports  dynamic  bandwidth  allocation,  so  getting  exact¬ 
ly  what  you  need  from  your  MPLS  network  might  require  writing  your  own  tools, 
early  adopters  say. 


MPLS  at  work 

How  Multi-Protocol  Label  Switching  keeps  the  WAN  traffic 
flowing. 
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An  egress  LSR  removes  MPLS  labels  to  shunt 
traffic  to  an  endpoint,  or  swaps  labels  to  steer 
traffic  to  another  destination  or  network. 


Champps  Entertainment,  for  example,  uses  an  MPLS  VPN  from  Netifice 
Communications  to  create  any-to-any  tunneling  between  51  restaurants  and  the 
Littleton,  Colo.,  headquarters.  “When  moving  to  the  MPLS  VPN,  we  . . .  wrote  a 
homegrown  application  to  crank  up  and  down  the  amount  of  bandwidth  to 
make  room  for  videoconferencing  when  needed,”  says  Steve  Johnson,  IT  director 
for  Champps. 

Managing  MPLS 

Another  gotcha  with  MPLS  can  be  management  complexity  as  those  same  rout¬ 
ing  redundancies  that  make  MPLS  so  hardy  also  make  it  more  difficult  to  manage. 
With  MPLS,  you  need  a  way  to  monitor  your  network  to  check  on  bandwidth  allo¬ 
cations  and  hold  service  providers  accountable  to  SLAs. 

“We’re  trying  to  run  transport  at  300  milliseconds  or  better  from  global  offices  to 
our  centralized  data  centers,”  says  Peterson,  who  uses  an  integrated,  multi-vendor 
suite  to  manage  and  monitor  Accenture’s  MPLS  infrastructure. “We  want  our  net¬ 
work  to  be  a  business  enabler,  not  the  other  way  around.” 

Most  businesses  manage  to  their  edge  routers  and  then  hand  off  management 
to  the  carrier,  although  carriers  such  as  MCI  will  manage  all  the  way  through  to 
the  data  center  if  clients  are  willing  to  pay  for  the  service  and  are  willing  to  give 
up  control.  “I  wanted  a  hybrid  relationship  with  my  carrier,  so  I  manage  my  part 
of  it,  and  MCI  clearly  knows  what  it’s  responsible  forf  Ghaus  says.This  reduces  fin¬ 
ger-pointing  by  a  great  deal.” 

Finally  to  prevent  outages  during  the  transition  to  MPLS,  Johnson  recommends 
running  the  MPLS  network  in  parallel  with  your  current  network  for  a  few  months 
to  be  sure  everything’s  going  smoothly  before  completing  the  transition. 

“You  need  to  understand  you  can  mess  up  your  installation  if  you  don’t  intro¬ 
duce  quality  of  service  on  your  network  before  you  move  to  MPLS,”  Ghaus  says. 
“Know  your  network.  Know  your  business.  And  know  the  applications. Then  take 
all  this  information  and  overlay  it  on  top  of  your  MPLS.”B 
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Business  activity  monitoring  tools  strive  to  turn 
threatening  events  into  non-issues. 

■  BY  ANN  BEDNARZ 


efore  law  firm  Hogan  &  Hartson  can  sign  a  new  client,  it  has  to 
make  sure  the  addition  won’t  create  any  conflicts  of  interest 
with  its  current  business.  An  examination  can  turn  up  dozens 
of  potential  conflicts  that  typically  require  attorney  attention. 


‘Among  the  folks  who  have  to  respond  to  these 
conflicts  issues  are  our  senior  partners  —  some  of 
the  most  time-pressed,  mobile  and  expensive  per¬ 
sonnel,”  says  Bill  Gregory,  CIO  at  the  Washington,  D.C., 
firm.“We  can’t  proceed  until  they  comment.” 

To  speed  along  the  business-intake  process,  Greg¬ 
ory  rolled  out  workflow  and  business-process  moni¬ 
toring  software  from  Metastorm  and  gave  the  attor¬ 
neys  wireless  BlackBerries  from  Research  In  Motion 
to  make  sending  and  receiving  comments  easier  for 
them.  Built-in  alerts  remind  attorneys  and  notify  con¬ 
flicts  staff  if  an  RFC  has  gone  unanswered  for  a  cer¬ 
tain  period  of  time. 

When  a  new  business  gets  the  go-ahead,  the 
Metastorm  software  is  designed  to  provide  immedi¬ 
ate  notice  to  various  internal  teams  so  they  can 
ready  resources  such  as  technical  or  administrative 
support.“In  the  past,  there  wasn’t  an  easy  way  to  dip 
into  a  bunch  of  paper  file  folders  and  get  that  infor¬ 
mation  out  to  the  proper  parties  right  awayf  Gregory 
says.  A  few  days  make  a  big  difference  when  trying 
to  line  up  appropriate  project  resources,  he  says. 

At  Hogan  &  Hartson,  the  Metastorm  software 
watches  for  bottlenecks  —  but  not  the  kind  Gregory 
is  used  to  hearing  about  as  CIO.  Instead  of  watching 
for  device  failures  or  network  slowdowns,  the  soft¬ 
ware  is  watching  for  lapses  in  the  execution  of  a 
business  process. 

Business-activity  monitoring  (BAM)  is  gaining 
ground  among  early  adopters  who  want  to  more 
quickly  become  aware  of  and  respond  to  changing 
business  conditions.  The  technology  provides  the 
business  equivalent  of  an  e-mail  notifying  an  airline 
passenger  of  a  flight  delay  or  a  text  message  alerting 
an  eBay  customer  he’s  been  outbid. 

BAM  technology  extracts  operational  data  from 
multiple  transaction  systems,  melds  it,  and  compares 
it  to  historical  data.  Correlating  all  these  sources 
helps  companies  assess  the  business  implications, 
based  on  historical  precedent,  of  events  in  real  time. 
The  sooner  a  company  becomes  aware  of  a  prob¬ 
lem  —  an  inventory  shortage,  sales  forecasting  dis¬ 
crepancy  or  increase  in  fraudulent  transactions,  for 
example  —  the  sooner  it  can  take  corrective  action 
to  avert  business-threatening  conditions. 

BAM  also  includes  ongoing  reporting  capabilities. 
At  Hogan  &  Hartson,  replacing  what  were  ad  hoc 
paper-based  methods  with  clear,  auditable  steps  not 


only  speeds  the  business  intake  process  but  also  pro¬ 
vides  the  firm  with  metrics  such  as  how  long  it  takes 
each  matter  to  clear  the  conflicts  investigation  stage, 
how  many  matters  are  pending  and  how  much 
potential  business  is  turned  away  because  of  insur¬ 
mountable  conflicts. 

“Every  law  firm  runs  into  situations  where  it  can’t 
take  on  a  piece  of  work  because  of  insurmountable 
conflicts.  In  the  past,  we  didn’t  have  good  insight  into 
what  those  occasions  were,”  Gregory  says. 

Bill  Gassman,  a  principal  analyst  at  Gartner,  likens 

Streamlining  operations 


BAM  to  network  and  systems  management  —  with  a 
twist.  What  makes  BAM  more  complex  than  tradi¬ 
tional  IT  monitoring  is  that  more  varied  types  of 
events  are  gathered  and  analyzed,  he  says. 

Rules  in  the  IT  world  largely  are  about  device  and 
performance  thresholds.  Rules  in  the  BAM  realm  are 
about  correlating  system  and  transactional  events, 
such  as  the  issuance  of  a  purchase  order,  and  then 
putting  a  predictive  spin  on  the  implications  of  those 
events.  That’s  much  harder  for  a  system  to  do  —  for 
example,  deducing  from  a  broken-down  truck  that 
goods  might  not  ship  on  time  and  that  the  late  deliv¬ 
ery  might  lead  to  a  potential  fine,  Gassman  says. 

Getting  started 

A  range  of  vendors  offer  BAM  tools,  including  busi¬ 
ness  process  management  players  such  as  Fuego 

See  Process,  page  SI  4 


Business  activity  monitoring  (BAM)  software  draws  transactional  and  operational 
information  from  myriad  real-time  and  historical  data  sources  to  help  IT  and  business 
managers  detect  and  respond  more  quickly  to  events  that  could  impact  the  business. 


Integration  middleware 

BAM  software  can  tap  into  an 
integration  broker,  which  handies 
some  of  the  extraction  and  formatting 
of  transaction  messages  from 
integrated  applications. 


Data  warehouse 

Data  warehouses  provide  historica! 
information  that  the  BAM  software 
extracts  and  uses  to  add  perspective 
to  real-time  event  analysis. 


External  application 

BAM  software  can  establish  direct 
connections  to  applications,  such  as 
those  of  a  third-party  data  provider. 


BAM  platform 
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Cell  phone  and  e-mail  alerts 

BAM  generates  cell  phone  and  e-mail  alerts 
to  notify  business  managers  of  significant 
events,  such  as  a  delay  processing  incoming 
purchase  orders  that  coiuld  impact, 
inventory  levels. 


User  PC  with  BAM  dashboard 

Users  can  customize  a  MM  dashboard  to 
monitor  applications,  financial  firms,  for 
example,  could  use  BAi  to  spot  exceptions 
such  as  potentially  tauUnt  or  tranaastians. 


External  application 

8AM  software  can  trigger  an  automated 
response  whan  tey  thresholds  are  met  For 
exempli,  it  can  send  an  atert  to  a  vendor- 
managed  inventory  system  when  stock  levels 
are  tow. 
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and  Metastorm;  integration  vendors  such 
as  Tibco  Software  and  SeeBeyond;  infra¬ 
structure  platform  vendors  such  as  BEA 
Systems,  IBM  and  Oracle;  and  business¬ 
monitoring  specialists  such  as  Celequest. 


The  software  today  typically  runs  on  its 
own  server  and  ties  into  business  applica¬ 
tions  via  application-integration  middle¬ 
ware  (or  directly  in  the  absence  of  a  mes¬ 
sage  broker  infrastructure)  to  draw  transac¬ 
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remote  locations  and  harsh  environments. 
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tional  data.  It  typically  hooks  into  data 
warehouses  for  access  to  historical  busi¬ 
ness  information. 

The  technology  isn’t  extremely  hard  to 
get  up  and  running,  but  using  it  effectively 
can  be,Gassman  says.“The  real  challenge  is 
in  doing  something  valuable  with  the 
alerts,”  he  says. 

Appropriate  alerting  depends  on  careful 
configuration  of  company-specific  process 
rules  and  notification  protocols.“There’s  no 
magic  behind  [BAM  alerts]. You  have  to 
define  your  business  models  and  business 
rules,  and  there’s  coding  involved  to  make 
that  happen,”  says  Angela  Venuk,  director  of 
product  development  at  GTESS  in 
Richardson, Texas. 

GTESS,  a  medical  claims  processing  out¬ 
sourcer,  uses  Fuego  software  to  keep  tabs 
on  its  operations.  The  software  sends  alerts 
when  handling  exceptions  such  as  incom¬ 
plete  claims  information  could  potentially 
put  the  company  in  danger  of  not  meeting 
a  service-level  agreement.  By  doing  more 
proactive  analysis  of  process  data,  as 
opposed  to  post-processing  audits,  GTESS 
can  resolve  problems  earlier  and  reduce 
wasted  processing  time,  she  says. 

One  benefit  of  Fuego’s  business-process 
management  platform  is  reusability  Venuk 
says.  For  example,  GTESS  can  make  use  of  a 
current  time-out  scenario  —  the  steps  to 
take  if  a  transaction  is  taking  too  long  —  in 
multiple  processes.  “We  can  tweak  it  from 
one  process  to  the  next,”  she  says. 

At  CenterPoint  Energy,  BAM  software 
helps  IT  Manager  Mary  Rich  mask  the  com¬ 
plexity  of  an  enormous  application-integra¬ 
tion  effort  and  feed  relevant  business  diag¬ 
nostics  to  departments  in  the  Houston 
energy  delivery  company 

CenterPoint  rolled  out  software  from 
SeeBeyond  for  its  application  integration 
work  and  uses  the  same  platform  for  BAM. 
The  combination  lets  Rich  retain  one  team 
to  support  the  entire  rollout.“It  makes  oper¬ 
ating  costs  a  lot  cheaper]’ she  says. 

With  the  BAM  tools,  CenterPoint  delivers 
customized  diagnostic  dashboards  to  users 
in  different  departments  such  as  revenue, 
business-process  management,  billing  and 
credit.  The  handoff  takes  the  load  of  track¬ 
ing  each  transaction  failure  off  of  the  IT 
team.  At  a  company  that  processes  500,000 
transactions  per  day  the  burden  lifted  is 
huge,  Rich  says. 

She  advises  IT  executives  considering 
BAM  to  put  in  the  time  upfront  to  figure  out 
what  kind  of  monitoring  will  most  benefit 
users.“Ask  whoever  is  going  to  get  the  data, 
‘What  is  your  biggest  problem?  What  will 
you  do  when  you  get  data  from  us?”’  Rich 
says.  Then  make  sure  the  project  includes 
the  necessary  data  extraction  and  reten¬ 
tion  resources  —  such  as  a  proper  data¬ 
base  design.“Don’t  wait  until  the  end  to  fig¬ 
ure  out  how  you’re  going  to  capture  and 
store  that  information,”  she  says. 

And  don’t  get  too  alert  happy  GTESS’ 
Venuk  adds.“It  can  become  overwhelming 
and  non-effective  if  people  are  getting  alert¬ 
ed  too  often.”* 


reconcilable  differences 

The  storage  folks  need  distance  replication 
with  the  lowest  latency,  zero  packet  loss, 
guaranteed  performance  and  security. 
Meanwhile,  network  managers  must  trim 
operational  costs  and  still  somehow 
prepare  the  network  for  the  coming 
avalanche  of  web  services,  grid  computing 
and  other  mission-critical  applications. 
Thankfully,  Ciena's  Adaptive  WAN™ 
supports  all  these  applications  and  more  in 
one  solution  designed  for  unprecedented 
scalability  and  zero  downtime.  Qualified  by 
all  the  major  storage  players,  Ciena's  plug- 
and-play  products  lower  costs  by  up  to 
80%  while  extending  applications  as  far  as 
you  want,  so  you  can  afford  to  reconcile 
everyone's  needs. 


ciena 


YOU  SEE  A  NETWORK,  we  see  storage  managers 

and  network  managers  both  getting  what  they  want. 


ADAPTIVE  WAN 


Download  our 
Storage  Extension 
White  Paper  at 

»  ciena.com/storage 


©  2005  Ciena  Corporation.  All  rights  reserved. 
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OUR  OPINION 


Disaster  recovery  gets  the  floor  in  this  ongoing 
roundtable  discussion  among  IT  execs. 


I  BY  JULIE  BORT 


Clustering  and  virtualization,  continuous  data  protection,  and  business-process  monitoring  are  becom¬ 
ing  integral  pieces  of  progressive  business-continuity  plans.  Three  IT  executives  recently  gathered  to  dis¬ 
cuss  these  new  data  center  technologies  and  how  they're  putting  them  to  use  for  disaster-recovery  pur¬ 
poses.  Participating  in  this,  second  in  an  ongoing  roundtable  series,  are  Tony  Adams,  IT  analyst,  J.R.  Simp  lot,  in  Boise,  Idaho;  Matthew 
Dattilo,  vice  president  and  CIO,  PerkinElmer,  in  Wellesley,  Mass.  ;  and  Rael  Paster,  head  of  collaboration  services  IT,  Serono,  Geneva. 


Clustering,  virtualization  -  what  are  your  thoughts  on  how  such 
emerging  technologies  can  keep  your  servers  running? 

Adams:  Our  core  disaster-recovery  strategy  is  rapidly  shifting  away  from  tape- 
based  restore  of  physical  systems.  Instead,  we  are  working  to  virtualize  as  much 
of  our  x86  workload  as  possible  and  leverage  long-distance  [storage-area  net¬ 
work]  -to- [storage-area  network]  capabilities  to  maintain  concurrent  data  at  the 
disaster-recovery  target  site.  With  virtualization,  we  will  be  able  to  concurrently 
maintain  exact  copies  of  entire  virtual  machines  at  that  site  and  be  able  to  boot 
those  virtual  machines  on  arbitrary  hardware.  Virtualization  completely  elimi¬ 
nates  the  need  to  have  a  1-to-l  inventory  of  identical  physical  hardware 
between  data  centers. 

We  accept  that  disaster-recovery  operations  can  be  degraded  from  a  perfor¬ 
mance  standpoint.Therefore  we  are  able  to  budget  lower  total  ‘horsepower’  for 
our  recovery  systems.  This  allows  us  to  fully  meet  business  functional  require¬ 
ments  with  lower  CPU  and  storage  costs. 

Dattilo:  For  us,  the  emergence  of  these  technologies  has  been  exciting  in  that 
they’re  allowing  us  to  significantly  reduce  the  occurrence  and  severity  of  those 
hardware  outages  that  would  impact  us  in  the  ‘several  hour  to  a  couple  of  days’ 
range,  depending  on  application. 

While  we’ve  had  these  capabilities  in  our  Unix  environment  for  years,  extend¬ 
ing  clustering  and  virtualization  to  our  Windows/Intel-based  environments  has 
given  us  better  choices  of  platforms,  and  better  reliability  in  this  environment. 
Lagging  certification  by  applications  providers  has  been  a  concern,  but  I  don’t 
see  it  as  a  long-term  barrier. 

We’re  bifurcating  our  outages  into  the  short  [couple  of  hours  or  typically  less  ] 
network/software  issues,  and  the  site  disaster  scenario.  We  haven’t  found  a  cost- 
effective  way  to  build  the  redundancy  to  eliminate  the  former  or  to  harden  our¬ 
selves  against  the  latter  scenario. 

Have  you  investigated  continuous  data  protection  (GDP)  technology 
and,  if  so,  what  do  you  think  about  it? 

Adams:  We  haven’t  investigated  CDP  in  particular  but  have  made  recent 
changes  to  our  back-up  infrastructure  to  attain  at  least  one  of  the  stated  bene¬ 
fits.  We  now  use  [Serial  Advanced  Technology  Attachment]  disk  as  our  first-level 
back-up  medium.  This  has  greatly  reduced  our  restore  times  because  primary 
images  are  typically  available  without  requiring  offsite  media  retrieval.To  meet 
offsite  storage  requirements,  we  duplicate  the  SATA-based  images  to  tape  on  a 
daily  basis. 

CDP  may  become  more  appealing  if  our  back-up  vendor  were  to  offer  it.  I  see 
this  as  a  back-up  solution,  and  I’d  prefer  to  keep  our  entire  back-up  solution  as 
integrated  as  possible. 

Paster:  We  explored  CDP  and  were  quite  impressed  with  our  findings.  As  a 
result,  we  deployed  Storactive’s  LiveBackup  to  our  users  last  year  and  now 
include  it  in  our  standard  workstation  image.  CDP  for  servers/SAN/  [network- 
attached  storage] ,  etc.  is  still  currently  best  suited  to  snapshot-  or  transaction- 
based  back-up  technologies. 

Business-process  monitoring  is  said  to  be  the  “next  big  thing’1  in  IT 
management  How  feasible  is  it  and  what  sorts  of  IT  systems  would 
you  need  to  make  it  work? 

Adams:  The  main  feasibility  requirement  is  that  the  application  or  business 


process  must  accommodate  functional  real-time  monitoring.  This  would  typi¬ 
cally  involve  a  suite  of  test  transactions  run  periodically  and  tested  for  validity 
This  type  of  monitoring  is  completely  feasible  with  today’s  ERP  systems  with 
centrally  located  and  enforced  business  functions.  This  architecture  allows  a 
common  approach  to  monitoring  the  potential  multiple  interfaces  to  the  cen¬ 
tral  business  functions. 

A  well-designed  centralized  monitoring  application, such  as  Nagios  [an  open 
source  program] ,  is  capable  of  directly  executing  [or  executing  by  proxy]  the 
test  transactions. 

Paster:  I  believe  this  is  quite  feasible,  and  the  business  will  demand  it.  We’ve 
already  seen  that  our  Web  dashboards  have  become  immensely  popular  and 
for  good  reason.  They  are  the  ‘enterprise  consoles’  for  business  performance 
management,  which  correlates  disparate  business  events  to  key  performance 
metrics  and  gives  the  business  managers  real-time  visibility 

Our  existing  systems  will  become  more  sophisticated  and  will  ‘naturally’ 
evolve  to  become  business-process  monitoring  orientated.  Application  perfor¬ 
mance  and  availability  can  be  easily  assessed  and  managed  according  to  their 
service  levels  and  business  priorities.  We’ve  been  using  Mercury  and  Tivoli  for 
our  [service-level  agreement]  management.The  next  step  is  to  fully  integrate  the 
various  tools  into  our  business  intelligence  so  that  we  may  among  other  things, 
accurately  assess  the 
business  impact  of 

application  downtime  DlSaSteP-PeGQWePy  OOt  SpOtS! 

and  prioritize  problem  I  liVi/Jj  The  tech  talk  continues  online.  These  executives  describe 
resolution  based  on  Von  their  biggest  trouble  spots  with  disaster  recovery, 
business  impact.  ■  v  I  www.networkworld.com;  DocFinder:  7221 
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KEEP  YOUR  BUSINESS  UP  AND  RUNNING  WITH  EMC  BUSINESS  CONTINUITY 
SOLUTIONS.  EMC  provides  a  broad  range  of  software,  services,  and  systems  built  for 
your  needs  today,  and  the  flexibilty  to  add  capacity  and  capabilities  tomorrow.  Whether 
it’s  reliable  backup  and  restore,  or  realtime,  multi-site  replication,  we  help  you  make 
business  continuity  a  reality.  Ensuring  your  information  and  applications  will  always  be 
there  when  you  need  them.  To  learn  more,  visit  www.EMC.com/continuity. 


EMC',  EMC,  and  where  information  lives  are  registered  trademarks  of  EMC  Corporation.  ©  Copyright  2004,  2005  EMC  Corporation. 
All  rights  reserved. 
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The  new  data  center  by  the 


From  autonomic  computing  to  virtualization,  new  data 
center  technologies  rate  with  readers. 


■  BY  BETH  SCHULTZ 


Desperately  seeking  manage¬ 
ment  relief,  IT  executives  are 
turning  to  autonomic  com¬ 
puting,  virtualization,  applica¬ 
tion  performance  monitoring  and  other  new 
data  center  technologies  as  antidotes,  a  recent 
survey  of  Network  World  readers  finds. 

Better  management  and  reliability  drives  IT  decisions  for  81% 
of  the  824  readers  surveyed  (see  “IT  drivers”  graphic,  page  S20), 
while  88%  of  respondents  report  that  recent  IT  investments  have 
entirely  or  partly  gone  toward  developing  the  new  data  center 
(see  “Investing  in  the  new  data  center” graphic,  right). 

Autonomic  computing  garners  the  most  interest  among  new 
data  center  technologies  (see  “Big  draw?  graphic).  No  doubt, 
respondents  see  autonomic  computing  as  the  way  to  ease 
deployment,  management  and  security  challenges.“It  currently 
takes  us  seven  hours  a  day  just  to  monitor  backups  —  much 
less  to  do  everything  else,”  says  one  respondent  who  clearly 
could  benefit  from  the  self-managing  nature  of  an  autonomic- 
computing  system. 

Improved  application  performance  stands  out  as  a  big  moti¬ 
vator  for  investing  in  a  new  data  center  infrastructure,  with  65% 
identifying  this  as  an  important  or  very  important  reason 
behind  network  upgrades  (see  “What’s  behind  network 
upgrades, ’’graphic).  Respondents  also  want  management  plat¬ 
form  vendors  to  improve  their  application  performance-moni¬ 
toring  features.  Sixty-nine  percent  of  respondents  said  they 
think  it  is  important  or  very  important  that  their  platform  man¬ 
agement  vendors  provide  a  clear  view  of  application  perfor¬ 
mance  and  the  ability  to  ensure  that  critical  applications  oper¬ 
ate  flawlessly 

Interestingly  the  survey  shows  that  most  respondents  know 
they  must  keep  up  with  best  practices  for  managing  IT  services. 
But  many  respondents  aren’t  familiar  with  the  foremost  IT  best- 
practices  frameworks:  the  Capability  Maturity  Model 
Integration,  Control  Objectives  for  Information  and  Related 
Technology  and  the  FT  Infrastmcture  Library  (see  “IT  best  prac¬ 
tices,”  graphic). 

A  disconnect  also  pops  up  when  looking  at  the  value  respon¬ 
dents  place  on  procedures  such  as  mapping  IT  to  business 
processes  and  the  deployment  reality  For  example,  40%  of 
respondents  view  mapping  IT  to  business  processes  as  very 
important. Yet  only  10%  have  done  so  completely 
Such  is  the  nature  of  the  new  data  center.  IT  executives  under¬ 
stand  the  value  of  the  new  data  center,  but  still  are 
mostly  in  the  planning  stages  of  how  to  use  or  are  just  begin¬ 
ning  to  embrace  the  antidotes. 


Investing  in  the  new  data  center 

Have  your  recent  (2002  to  2004)  IT  Infrastructure  and  application 
investments  been  supportive  of  the  new  data  center  concept? 


Completely  supportive 
11% 


Don't  know 
6% 


Not  supportive 

7% 


NOTE:  Pie  chart  does  not 
equal  100%  due  to  rounding 


SOURCE:  GILMORE  RESEARCH  GROUP 


IT  drivers 

To  what  degree  are  the  following  forces  driving  your  if  decisions? 
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See  Survey,  page  S20 
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It's  8am.  Guess  how  many  attacks  hit  your  network  last  night 


Keep  your  network  safe  from 
dynamic  threats  with  Gateway 
Anti-Virus,  Anti-Spyware  and 
Intrusion  Prevention  from 
SonicWALL. 


Trust  us,  it's  an  unbelievable  number. 


But  how  do  you  get  enterprise-class  security  without  blowing  your  budget?  SonicWALL®  has  the  answer. 

We  take  state-of-the-art  network  security  and  make  it  simple,  reliable  and  affordable.  So  you  can  feel  secure. 


Take  our  Gateway  Anti-Virus/Intrusion  Prevention  Solution.  It's  real  network  security  that  delivers  intelligent, 
real-time  protection  against  the  most  sophisticated  new  viruses,  spyware  and  network  intrusions.  It  combines  a 
powerful,  deep  packet  inspection  engine  with  a  continuously  updated  database  of  the  latest  attack  signatures. 
Comprehensive  security  in  an  affordable,  usable  package — that's  the  SonicWALL  answer. 

Take  the  guesswork  out  of  network  security.  For  more  details  on  our  Gateway  Anti-Virus,  Anti-Spyware,  Intrusion 
Prevention  and  other  dynamic  threat  management  solutions  visit  www.sonicwall.com/home/gav.asp  or  call 
us  at  1.888.557.6642. 


Around  the  clock ,  around  the  world,  and  around  the  Web- 

SonicWALL  is  there  for  you. 


SONICWALL 


Gateway  Anti-Virus  ■  Anti-Spyware  ■  Intrusion  Prevention  ■  Content  Security  ■  Secure  Wireless  ■  Firewall  ■  VPN 


Behind  network  upgrades 

Seasons  for  upgrading  and  their  importance 

■9|  16% 

Add  10G  Ethernet 
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j-  Provide  Gigabit  Ethernet  to  desk 

9091  19% 

i-  Support  VoIP 
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®  [-  Support  remote  offices 
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I  |  Enable  secure  access  for  partners  and  others 
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~  Support  wireless  users 
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-  Support  Web  apps _ 
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improve  app  performance 


Important 


Very  important 
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IT  best  practices 

How  important  is  it  to  stay  current  with  best  practices  and 
procedures  for  managing  IT  services? 


Important  or 
very  important 

6% 


Moderately  important 

16% 

Mot  or  somewhat 
important 
8% 

Don't  know 

1% 


Production  Tracking  Over  Ethernet 


Eliminate  your  shop-floor 
PCs  with ... 

Ethernet  Terminals  from 
ComputerWise  connected  to 
your  in-house  LAN. 

Capture  production  data 
directly  into  files  on  your 
server. 


Features  C  Benefits 

•  Interactive  Telnet  Client 

•  TCP/IP  over  10/IOOBaseT  Ethernet 

•  Built-in  Barcode  Badge  Reader 

•  Optional  Mag-Stripe  &  RFID  Badge  Reader 

•  Auxiliary  RS-232  Serial  port 

•  Customizable  Data  Collection 


ife  Program  Included 
Larger  keyboard  and 
P^Mlsplay  sizes  available 
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H  J  800-255  3738  or  visit  www.computerwise.com 
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How  familiar  ar@  you  with  various  IT  frameworks? 


I  Not  or  somewhat  familiar 
I  Moderately  famiiiar 


Familiar  or  very  familiar  i 

Don’t  know 


SOURCE:  GSLMCSe  RESEARCH  GRGU? 


see 


ass 


&  'ilfflSl  HiSHI  . 

The  New  Data  Center  www.networkworld.com/ndcSOQ5/bizcon  May  S3,  2005 


Survey 

continued  from  page  S18 

Survey  methodology 

Fluke  Networks  commissioned  Gilmore  Research  Group  to  conduct  a  survey 
of  Network  World  readers  and  other  IT  professionals  regarding  the  new  data  cen¬ 
ter  concept  and  supporting  technologies  and  business  practices.  A  total  of  1,018 
qualified  respondents  participated  in  the  survey  The  results  profiled  here  repre¬ 
sent  the  815  Network  World  reader  responses  only.  ■ 


The  big  draw 


How  important  are  the  following  new  data  center  technologies 
to  your  organization  today,  and  how  important  will  they  be  in 
the  future? 


Today 

i  In  five  years 
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The  Next-Generation  IT  Infrastructure 

Cyclades  AlterPath™  System  is  the  industry's  most  comprehensive  Out-of-Band 
Infrastructure  (OOBI)  system.  The  AlterPath  System  allows  remote  data  center 
administration,  eliminating  the  need  for  most  time-consuming,  remedial  site 
visits.  When  fully  deployed  in  your  data  center,  Cyclades  AlterPath  System  lowers 
the  risks  associated  with  outages,  improves  productivity  and  operational 
efficiency,  and  cuts  costs. 

Each  component  of  the  AlterPath  System  is  designed  to  seamlessly  integrate 
into  the  enterprise,  able  to  scale  in  any  direction.  Whether  you  need  serial 
console  management  of  networking  equipment,  KVM  for  access  to  Windows® 
servers,  branch  management,  IPMI  or  HP  iLO  for  service  processor 
management,  or  advanced  power  management,  the  AlterPath  System  delivers. 
Cyclades  brings  it  all  together,  making  OOBI  administration  seem  like  child’s  play. 

Over  85%  of  Fortune  100 
choose  Cyclades. 
www.cyclades.com/nw 

1.888.cyclades  ■  sales@cyclades.com 

©2005  Cyclades  Corporation.  All  rights  reserved.  All  other  trademarks  ond  product  imoges  ore  property  of  their  respective  owners.  Product  information  subject  to  change  without  ten 
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Oracle’s  Austin  facility  wins  our  New  Data 
Center  Award  for  grid  use  and  more. 


One  of  Oracle's  crown  jewels  —  a  state-of-the-art  data  center  in  Austin, 
Texas  —  recently  earned  recognition  as  Data  Center  of  the  Year  in  an 
award  program  cosponsored  by  AFCOM,  a  group  of  data  center  profes¬ 
sionals,  and  Network  World.  And  no  wonder  The  3-year-old  facility  houses 
an  impressive  array  of  new  data  center  technologies,  protected  by 
James  Bond-like  security  systems.  The  Austin  data  center,  which 
originated  as  part  of  a  worldwide  effort  to  consolidate  internal  IT 
infrastructure  and  shave  operational  expenses,  has  become  the 
heart  of  Oracle’s  On  Demand  software-as-a-service  outsourcing 
initiative.  The  data  center  also  supports  a  variety  of  internal  busi¬ 
ness  applications.  Signature  Series  Executive  Editor  Julie  Bort  recently 
spoke  with  David  Thompson,  CIO  of  global  IT  (pictured,  far  left j,  and 
Mitchell  McGovern,  vice  president  of  global  data  center  operations,  to  dis¬ 
cuss  the  data  center. 


Why  did  Oracle  build  the  Austin  data  center? 

Thompson:  We  spent  three  years  in  a  dramatic  process  of  reduc¬ 
ing  the  amount  of  infrastructure  we  had  supporting  our  corporation  and  reduc¬ 
ing  our  data  centers  around  the  world  to  [one]  primary  data  center,  which  is  the 
Austin  location. 

McGovern:  The  IT  budget  in  1999  was  in  excess  of  $500  million  and  our  IT 
budget  today  is  less  than  half  of  that.  A  large  portion  of  those  costs-savings  is 
directly  related  to  the  global  consolidation  that  we  have  accomplished. 


archived.  We  also  have  anti-passback  card  readers,  and  the  glass  is  protected  by 
blast-guard  window  film.The  physical  perirpeter  fence  is  vehicle-proof  because 
it  has  two  feet  of  concrete  and  then  six  feet  of  wrought  iron  on  top  of  that.  In  the 
interior,  we  have  photoelectric  beams,  so  should  someone  decide  to  scale  the 
fence,  it  sets  off  alarms  for  the  manned  guards  that  are  24/7  responsive. We  quite 
often  do  internal  penetration  tests  and  test  for  the  responsiveness  of  guards.  We 
do  seven-point  employee  background  checks,  and  we  check  packages  for 
bombs  with  X-rays.  And  we  check  all  persons  coming  into  the  facility 

See  Award,  page  S25 


What  makes  this  data  center  unique? 

McGovern:  We  have  3  petabytes  of  disk  [storage  capacity]  .We  are  the  largest 
Dell/Linux  installation  and  the  largest  Network  Appliance  installation  on  the 
planet,  under  one  roof. 

Oracle's  marketing  message  is  all  about  grid  these  days.  What  role  does  grid 
play  at  this  data  center? 

McGovern:  There  are  multiple  lines  of  business  that  utilize  grid  technology 
We  have  a  grid  for  our  server  technologies  division.  There  is  a  mass  of  5,000 
servers,  where  developers  around  the  world  can  take  a  slice  of  that  computing 
power,  do  their  eight  tolO  hours  of  coding  a  day  then  release  that  computing 
resource  back  into  the  grid  to  be  utilized  by  another  developer  somewhere  else 
in  the  world.  Similar  to  that,  we  have  an  education  grid  for  Oracle  education 
training.They  take  a  slice  of  the  computing  resource  here  in  our  education  grid, 
teach  their  class,  then  release  that  computing  resource  back  into  the  grid  for  the 
next  class  to  take  place  somewhere  else  in  the  world.  A  grid  also  supports  our 
application  demo  systems. 

Thompson:  So  we  have  four  grids.The  development  grid  is  used  for  develop¬ 
ment,  but  it  is  also  to  use  our  latest  release  of  our  technology  internally  Then 
when  we  have  proven  it,  we  roll  it  out  into  the  education,  demo  environments 
and  the  on-demand  grids. 

In  what  ways  does  the  data  center  support  Oracle’s  extended  enterprise? 

Thompson:  Our  customer  data,  which  is  one  of  our  most  important  assets,  is 
opened  to  our  customers  via  our  e-business  portal,  and  that’s  housed  in  Austin. 
We  also  have  a  supplier  portal  hosted  at  our  Austin  data  center.  We  have  rela¬ 
tionships  with  Cisco,  [for]  VoIP  technology  We  are  housing  our  call 
manager  in  Austin,  and  Cisco  provides  support  and  . . .  has  an  interface  to  us  in 
our  Austin  data  center. 

What  security  do  you  employ  at  the  facility? 

McGovern:  Biometrics  —  hand  geometry  as  well  as  retina  scanning  —  [is 
used  in]  a  dual-biometric  entry  in  a ‘man  trap.’ Also,  we  use  closed-circuit  televi¬ 
sion  systems  of  the  entire  interior  and  exterior  of  the  facility  all  digital-video 


Oracle’s  data  center  stats 

•The  130,000-square-foot  Austin  data  center  hosts  the  world’s 
largest  Network  Appliance  and  Dell/Linux  installations  under  one 
roof  at  12,000  servers  and  3  petabytes  of  storage  capacity.  Oracle 
primarily  uses  two-  and  four-processor  Dell  PowerEdge  servers 
running  Red  Hat  Enterp  se  Linux  AS  v.  2.1  an<  3. 

•  About  20%  of  Oracle’s  total  IT  population  work  for  or  with  the 
Austin  lata  center. 

•  25%  of  the  site's  power  comes  from  green  sources,  primarily  a 
wind  farm  in  Texas,  earning  it  designation  as  an  Environmental 
Protection  Agency  Green  Power  Partner  and  Austin  Energy’s 
GreenChoice  member. 

•  In  its  IT  overhaul,  Oracle  merged  40  data  centers  into  this  site. 

•The  site  averages  104  watts  of  electrical  oi  put  per  square  foot 
of  the  raised  floor,  with  some  sections  supporting  170  watts  per 
square  foot. 

•  Of  the  1,000  servers  at  the  Austin  data  center,  2,000  are  used 
for  Oracle's  On  Demand  services. 


M0I  wins  big! 

MCI  took  home  top  honors  in  the  AFGOM/Network  World  New  Data  Center  Award 
competition  for  Secure  Data  Center  and  Data  Center  Manager  of  the  Year. 

For  details  on  these  winning  entries,  visit  us  online  at 

www.networkworld.com;  DocFinder:  7222 


There  May  Be  a  Hole 
in  Your  Data  Center's  Security, 


Raritan's  Dominion®  KX.  Safe,  Secure  and  Available  IT  Services. 


Holes  in  Swiss  cheese  mean  the  cheese  is  ripe.  Holes  in  security  mean  you're  the  one  who's  ripe  -  for  problems.  Unlike  some 
other  KVM  providers,  Raritan  always  encrypts  all  KVM  traffic  -  keyboard,  mouse,  AND  video,  providing  the  most  secure 
solution  on  the  market.  And  the  Dominion  Series  helps  reduce  complexity  and  downtime,  while  increasing  productivity. 
Which  means  your  incident  response  and  problem  resolution  times  get  better.  Instead  of  smelling  like  bleu  cheese. 

For  your  copy  of  a  free  White  Paper: 

"Understanding  the  Security  Implications  of  Deploying  KVM  Over  IP" 

Call  1-800-724-8090  x1428  or  visit  us  at  Raritan.com/1428 
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Center 


The  KX  Digital  KVM  Switch 
is  a  core  building  block  of 
Raritan's  Complete  Data  Center 
Management  Solution. 


Dominion 

Series 


Paragon  II 


IP-Reach 


Raritan 


©  2005  Raritan  Computer,  Inc.  Raritan,  Paragon,  IP-Reach,  Dominion  and 
CommandCenter  are  trademarks  or  registered  trademarks  of  Raritan  Computer,  Inc 


When  you're  ready  to  take  control 
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Customer  preferences,  billings,  account  numbers— 
everything  to  get  the  job  done— now  available  in  the  comfort  of  home 

In  real  time.  In  real  terms.  Cisco  IP  Communications  brings  together 
voice,  video  and  data  to  transform  homes  into  call  centers, 

so  employees  don’t  have  to  be  at  work,  to  be  at  work. 

Learn  how  Cisco  is  helping  change  business  at 
cisco.com/poweredby. 


Award 

continued  from  page  S22 

Enterprise  honorable  mentions 

The  New  Data  Center  Awards,  co-sponsored  by  AFCOM  and  Network 
World ,  yielded  these  four  notable  enterprise  data  center  designs. 

St.  Luke's  Health  System,  Kansas  City,  Mo. 

At  St.  Luke’s  Health  System,  the  mission  is  to  become  paperless.  Under  the  direction  of 
manager  Harold  Sirls,  the  company  moved  from  a  mainframe  network  to  a  newly  built, 
state-of-the-art  data  center  equipped  with  a  mix  of  Unix  and  Windows  environments.  The 
data  center  supports  the  sharing  of  hundreds  of  gigabytes  of  information  daily,  including 
digital  imagery,  among  medical  professions  across  the  Midwest.  Some  highlights  of  the 
new  design: 

•  Hosts  real-time  streaming  video  for  intensive  care  patient  monitoring. 

•  Features  24/7  network  and  security  monitoring,  as  well  as  sophisticated  disaster  recov¬ 
ery  and  failover  technology. 

•  Uses  open  source  applications  and  Windows  platforms  to  enable  cross-training  of  data 
center  IT  team. 

•  Acts  as  the  hub  of  a  100-mile  SONET  ring. 

FreshDirect,  Long  island,  N.Y. 

FreshDirect,  an  online  fresh  food  manufacturing  and  delivery  services  outlet,  was  spin¬ 
ning  its  wheels  with  its  legacy  architecture  of  RISC  servers.  The  company  had  big  expan¬ 
sion  plans  for  its  e-commerce  business,  so  CTO  Myles  Trachtenberg  spearheaded  a  com¬ 
plete  overhaul  of  the  company’s  data  center.  The  lynchpin  of  the  new  design  is  the  use  of 
open  source  Egenera  blade  servers  and  VMware  virtualization  software  to  support  Fresh- 
Direct’s  Oracle,  BEA  Systems  and  Apache  e-commerce  applications.  With  Trachtenberg’s 
bold  initiative,  the  company  has  seen  impressive  results  such  as: 

•  Checkout  time  for  customers  reduced  from  14  seconds  to  1.5  seconds. 

•  S  t  'are  upgrades  that  used  to  take  up  to  five  hours  and  require  a  full  system  shutdown 
now  can  be  done  on-the-fly  in  less  than  30  minutes. 

•  The  company  claims  $1.2  million  in  savings  in  licensing  fees  and  administration  costs. 

Massachusetts  Department  of  Revenue,  Boston 

The  Massachusetts  Department  of  Revenue  recently  retooled  its  online  filing  and  payment 
system  for  taxpayers.  At  the  heart  of  the  “WebFile  for  Business”  project  is  a  significant 
redesign  of  the  agency’s  data  center  to  support  Web  services.  The  DOR  has  been  able  to 
process  almost  700,000  tax  returns  and  $2  billion  in  payments  in  the  first  10  months  of 
operations.  The  DOR  employed  sophisticated  security  techniques  to  protect  vulnerable 
Web-based  architecture: 

•  Implemented  a  security  gateway  from  DataPower  to  filter  XML  and  Simple  Object  Access 
Protocol  traffic. 

•  As  a  best  practice,  the  DOR  added  application-level  inspection  of  Web  services 
transmissions. 

•  Custom-built  an  application  for  centralized  monitoring  of  traffic  generated  by  the  SOAP 
services. 

PHH  Mortgage,  Mt.  Laurel,  N.J. 

A  provider  of  private-label  retail  mortgages,  PHH  Mortgage  depends  on  its  e-infrastruc¬ 
ture  to  drive  business.  Its  high-profile  client  list,  which  includes  large  financial  institu¬ 
tions,  prevents  the  company  from  suffering  outages  of  any  type.  To  attain  high  availability, 
the  company  completely  restructured  its  data  center  operations,  home  to  its  call  center 
and  other  mission-critical  applications.  Some  highlights  of  the  new  design: 

•  A  two-tier  approach  that  features  a  primary  and  secondary  data  center. 

•  Sophisticated  failover  architecture  that  can  handle  a  complete  data  center  failure  with¬ 
out  an  interruption  in  business. 

•  Replication  of  data  in  real  time  from  mission-critical  systems  in  the  primary  data  center  to 
identical  systems  in  the  secondary  data  center  using  Windows  Server  2003  clustering. 

•  The  two  data  centers  feature  redundant  heating,  cooling  and  power  systems,  as  well  as 
24/7  network  and  facilities  monitoring  and  closed-circuit  surveillance. 
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—  Sandra  Giltlen 


Tech  entrepreneur  Bill  Coleman 
discusses  the  promise  of  automated 
application  management. 


■  BY  SUSAN  SCHAIBLY 

If  the  new  data  center  is  to  become  intelligently  self-healing  and  unquestionably  reliable,  trust¬ 
worthy  automation  technologies  had  better  begin  to  materialize.  Enter  start-up  Cassatt,  which 
aims  to  fill  in  the  automation  gap  with  products  that  perform  real-time  provisioning  of  IT 
resources.  Over  time,  such  automation  will  nudge  hardware  toward  commoditization,  which 
will  lower  the  data  center's  total  cost  of  ownership,  predicts  Bill  Coleman,  CEO  of  Cassatt, 
one  of  Network  World’s  10  start-ups  to  watch  for  2004  (see  www.networkworld.com; 
DocFinder:  7029).  Here  Coleman  shares  his  IT  automation  vision. 


Your  marketing  materials  say  that  Cassatt’s  flagship  product,  Collage, 
creates  a  virtual  pool  of  servers.  How  is  this  different  from  what  server 
virtualization  vendors,  such  as  VMware,  do? 

Collage  is  automating  IT  operations. We  happen  to  use,  as  one  aspect,  the  abili¬ 
ty  to  virtualize  how  the  application  and  data  are  profiled  across  the  network.That 
is  different  from  what  VMware  or  [Microsoft]  Virtual  Server  or  Xen Works  do.  We 
can  provide  run-time  automation  to  any  application  running  on  any  system,  in¬ 
cluding  a  virtual  machine  such  as  VMware.The  other  thing  is  if  a  specific  server 
fails,  VMware  might  not  actually  know  that  it  is  running  on  several  physical 
servers  simultaneously  But  we  can  automate  its  deployment,  and  we  can  auto¬ 
mate  its  failover.  We  can  automate  its  scalability  We  can  automate  attachment 
management  and  version  management  —  on  the  fly 

How  does  your  technology  differ  from  grid  computing,  where 
CPUs  can  be  used  across  servers  as  if  they  were  a  single 
pool? 

Grid  computing,  virtualization  and  utility  computing  are  all 
way  overloaded  terms  whose  definitions  are  not  detailed 
enough  to  say  what  they  actually  are.  Our  focus  is  limited  to  one  thing  only: 
optimizing  how  we  profile  what  you’re  doing  with  your  applications  and  data 
based  on  the  physical  resources  available. You  can  call  that  a  grid.You  could 
actually  at  some  point  [when  you  figure  out  how  to  measure  and  meter  the 
capacity  you’re  selling  and  bill  it], call  it  a  utility. 

As  we  get  closer  and  closer  to  a  world  in  which  you  can  consider  the  hard¬ 
ware  components  separately  fungible,  then  we  will  have  the  reality. 
Something  like  us  has  to  sit  there  and  not  require  any  changes  to  the  software 
and  not  require  any  changes  to  the  hardware  but  dynamically  be  able  to 
reconfigure  how  the  software  and  data  is  profiling  and  using  the  physical 
world. 

Does  this  type  of  on-demand  automation  ease  business  continuity  and  dis¬ 
aster-recovery  processes?  If  so,  in  what  ways? 

We  virtualize  the  connection  between  the  physical  world  and  the  logical 
world.  There  is  something  that  is  needed  beyond  provisioning,  beyond  virtual 
machines,  beyond  system  management  to,  in  run-time,  be  able  to  [adjust  to 
changing  conditions]  without  people  having  to  physically  take  down  servers 
and  rebuild  them  and  put  another  server  up.  We  don’t  care  what  breaks  in  the 


hardware.  We’re  not  trying  to  manage  the  hardware.  All  we’re  trying  to  do  is  take 
a  set  of  policies  —  and  those  policies  can  be  utilization,  they  can  be  failure,  they 
can  be  time  of  month  —  and  change  how  we’re  reprofiling  the  application  data 
flow  to  maximize  it.  Automating  run-time  operations  means  a  failover  site  or 
business  continuity  is  a  byproduct  —  it  just  happens. 

What  are  your  thoughts  about  the  direction  of  IT  generally?  When  IT  reach¬ 
es  the  Holy  Grail  of  the  fully  automated  data  center  running  on  inexpen¬ 
sive  hardware,  then  what? 

What  we’re  going  through  is  the  commoditization  of  computing,  both  on 
the  hardware  side  [call  it  grid,  call  it  whatever]  and  also  on  the  application 
side.  It’s  going  to  take  a  while,  but  the  role  of  IT  automation  is  to 
enable  it.  We’re  going  to  get  to  a  point  very  quickly  in  which  if 
we  don’t  automate  at  least  a  part  of  IT  operations,  we  will  not  be 
able  to  manage  the  scale.  Without  IT  automation,  at  some  level, 
it  won’t  happen.This  is  the  fundamental  missing  piece  in  the  dis¬ 
tributed  computing  paradigm  today. 

Once  we  enable  IT  automation  on  commodity  computing,  we 
dramatically  drive  down  the  hardware  cost  and  the  operation  and  mainte¬ 
nance  costs.  It’s  going  to  take  several  years,  but  as  that  happens,  it  will  accel¬ 
erate  outsourcing  of  the  running  of  the  back  end  of  the  utility  by  every  cor¬ 
poration  in  the  world  because  it  not  only  drives  down  the  capital  expenditure 
cost,  but  it  also  drives  down  the  operating  expenditure  cost. 

There  will  no  longer  be,  10  years  from  now, high-priced  switches, high-priced 
storage  and  high-priced  servers.  They  will  be  so  commoditized  that  compa¬ 
nies  that  are  in  those  businesses  today  will  have  to  find  ways  to  increase  their 
value  proposition  —  and  they  will;  IBM  has  done  it  before.IT  automation  will 
take  the  economics  out  of  the  outsourcing  industry  as  we  know  it  today,  given 
the  focus  on  backend  operations  at  very  high  cost.  But  it  will  also  disintegrate 
the  application  stacks  that  we  know,  so  it  will  change  the  software  world. 
Once  that  happens  —  and  we’re  talking  about  10  years  from  now  —  then  the 
economics  of  everybody  that  uses  computers  will  be  affected. ...  We  are  final¬ 
ly  moving  toward  a  model  of  computing  in  which  it  isn’t  about  the  technolo¬ 
gy,  it’s  about  the  information  and  the  business  model. 

Schaihly  is  a  freelance  writer  in  Fort  Collins,  Colo.  She  can  be  reached  at 
sschaibly@aol.  com. 
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Turn  Control  Freaks  Into  Remote  Control  Freaks 


#Kick  back.  Relax.  Make  yourself  comfy.  It’s  all  part  of  a  day’s  work  when  you're  in  total  control  with  our  DSView®  3  management 
software*  Now  you  can  remotely  control  servers,  serial  devices  and  power  devices  from  a  single  browser  interface.  Reboot 
servers  down  the  hall  or  around  the  world.  With  virtual  media,  you  can  even  remotely 
load  software  without  setting  foot  in  the  data  center.  Those  hours  spent  at  the  rack 
are  over.  Visit  us  at  www.avocent.com/stayincontrol.  And  start  looking  for  a  new  chair. 

*  Recliner  recommended,  but  not  included . 

t?  2005  Avocent  Corporation.  Avocent,  the  Avocent  logo.  DSView  and  The  Power  of  Being  There  are  registered  trademarks  of  Avocent  Corporation. 
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Free  White  Paper! 

To  receive  a  FREE  backup, 
recovery  and  archive 
white  paper  visit  us  at 
www.quantum.com/helprne 
and  enter  code  ADV138. 


Restoring  your  data  at  tape  speed  isn't  always  an  option.  That's  why  Quantum  offers 
you  a  disk-based  backup  solution  that  emulates  a  tape  library, 
for  seamless  integration  into  your  existing  backup  environment. 

So  you  get  the  best  of  both  worlds  -  restore  speeds  up  to  10  times 
faster  while  preserving  your  tape  backup  processes  and  investments. 

At  Quantum  we're  in  the  business  of  making  tape  work.  Backup,  recovery  and  archive. 
It's  what  we  do.  For  the  answers  on  how  Quantum  can  make  tape  work  for  you,  call 
1-866-827-1500  or  visit  us  at  www.quantum.com/helpme. 


Quantum 


BACKUP  RECOVERY.  ARCHIVE.  IT’S  WHAT  WE  D0.M 

©2005  Quantum  is  a  trademark  of  Quantum  Corporation  in  the  United  States  and  other  countries.  All  other  trademarks  are  the  property  of  their  respective  companies. 


Vonage  readies  first  business  service 


■  BY  DENISE  PAPPALARDO 

Those  familiar  with  Vonage  and  its 
unlimited  $25-per-month  VoIP  service  for 
consumers  might  want  to  know  that  the 
service  provider  is  readying  an  offer  for 
businesses. 

Vonage  is  quietly  testing  its  Business 


■  Network  vendor  ECI  Telecom  last 
week  announced  that  it  is  acquiring 
edge  router  maker  Laurel  Networks 
for  $88  million.  The  acquisition  will  add 
edge  routing  and  IP  service  capabili¬ 
ties  to  ECl's  broadband,  optical  and 
core  routing  portfolio.  Chiaro  Net¬ 
works  provides  ECl’s  core  router 
under  a  resale  arrangement.  Founded 
in  1999  and  based  in  Pittsburgh, 

Laurel  has  received  $118  million  in 
venture  funding  and  has  150  employ¬ 
ees.  Laurel  began  selling  its  edge 
routers  in  2002  and  almost  doubled  its 
sales  in  2003  and  then  in  2004,  ECI 
says.  Sales  for  the  past  12  months 
that  ended  April  30  totaled  $18  million. 
Customers  include  Level(3),  Korea 
Telecom  and  Dacom.The  transaction 
is  expected  to  close  in  a  few  weeks. 
Laurel  then  will  become  ECl's  Data 
Networking  Division. 

■  Qwest  last  week  announced  a  $20 
million  contract  to  provide  network 
services  to  the  U.S.  Department  of 
Housing  and  Urban  Development. 
Qwest's  IP-based  iQ  Networking 
services  will  transfer  data  between 
nearly  100  HUD  field  locations  and  six 
regional  offices.  Qwest  will  provide 
these  services  as  a  subcontractor  to 
Lockheed  Martin  under  HUD’s  Infor¬ 
mation  Technology  Services  contract. 
Under  an  initial  five-month  $1.1  million 
contract,  there  are  nine  additional 
one-year  options  that  could  be  worth 
more  than  $19  million,  Qwest  says. 
The  contract  includes  access  to 
Qwest's  Multi-protocol  Label 
Switching-based  private  IP  network. 
The  deal  is  in  addition  to  Qwest's  cur¬ 
rent  contracts  with  HUD. 


Plus  service  with  a  few  customers  in  the 
U.S.The  service  could  save  customers  35% 
over  traditional  telephone  deals,  accord¬ 
ing  to  the  company  This  will  be  Vonage 's 
offering  for  customers  who  need  more 
than  two  voice  lines. 

The  service  provider  is  bundling  a  set 
number  of  lines  and  minutes  for  a  flat 
monthly  fee  (see  graphic) .To  support  mul¬ 
tiple  VoIP  lines, Vonage  certified  a  handful 
of  devices  from  AudioCodes,  Cisco,  Epygi 
Technologies  and  Quintum  Technologies. 

“Through  word  of  mouth  [small  office/ 
home  office]  users  wanted  to  bring  Von¬ 
age  into  their  business,”  says  Mark  Lyons, 
vice  president  of  value-added  reseller 
(VAR)  sales  at  the  service  provider.  To 
ready  a  service, Vonage  first  identified  VoIP 
products  that  could  support  two  to  100 
employees,  he  says.  And  then  the  service 
provider  teamed  with  VARs. 

“We  signed  up  about  100  resellers  in 
eight  months,”  Lyons  says.  He  says  the  pilot 
has  been  going  well  with  500  Business 
Plus  lines  in  service. 

While  Lyons  says  Vonage  will  sell  its 
Business  Plus  service  on  Vonage’s  Web  site 
when  the  offering  is  officially  available  in 
the  late  third  or  early  fourth  quarter, VARs 
will  do  most  of  the  selling.  Lyons  says 


■  BY  JIM  DUFFY 

Verizon  Wireless  last  week  announced 
new  data  pricing  for  enterprise  customers, 
and  software  to  push  wireless  e-mail  to 
work  groups  and  large  organizations. 

The  data  pricing  is  available  to  enterprise 
customers  of  Verizon  Wireless’  National- 
Access  and  BroadbandAccess  services. 
National  Access  lets  customers  access  the 
Internet,  intranet,  e-mail,  attachments  and 
business  applications  from  their  laptops  at 
average  speeds  of  60K  to  80K  bit/sec,  and 
bursts  of  up  to  144K  bit/sec. 

BroadbandAccess  is  Verizon  Wireless’ 
premier  EV-DO-based  data  service,  offering 
customers  average  speeds  of  400K  to  700K 
bit/sec,  capable  of  bursts  up  to  2M  bit/sec. 

Unlimited  use  of  NationalAccess  now 
costs  $60  for  monthly  access,  a  savings  of 
$20  a  month,  while  unlimited  use  of 
BroadbandAccess  remains  $80  per  month. 
Customers  who  travel  outside  a  Broad¬ 
bandAccess  coverage  area  with  an  EV-DO 


that’s  because  Vonage  does  not  want  to  be 
in  the  business  of  selling  VoIP  equipment. 

“This  is  a  pretty  good  market  for 
[Vonage]  to  go  after,"  says  Irwin  Lazar, 
senior  analyst  at  Gartner. “Vonage’s  biggest 
challenge  in  breaking  into  the  business 
services  market  will  be  competing  with 
other  telcos.” 

Lazar  says  established  players  such  as 
Verizon  and  the  other  incumbent  local 
exchange  carriers  offer  a  variety  of  VoIP 
services  for  small  and  midsize  business 
(SMB)  customers.  Vonage  will  face  con¬ 
siderable  competition,  even  at  the  low 
end  of  the  market,  he  says. 

Some  of  these  VoIP  services  are  becom¬ 
ing  more  sophisticated,  such  as  Verizon’s 
recently  announced  Iobi  Enterprise  ser¬ 
vice,  which  brings  VoIP-like  unified  voice 
and  data  communications  to  traditional 
Centrex  customers,  he  says. 

Also,  some  customer  might  prefer  com¬ 
panies  such  as  Volo  Communications  and 
DSL.net,  which  bundle  broadband  and 
VoIP  services. Vonage  does  not  offer  users 
broadband  connectivity,  just  the  VoIP  ser¬ 
vice  that  runs  over  that  bandwidth.  Lazar 
says  some  users  will  prefer  a  service 
provider  that’s  responsible  for  both. 

Despite  the  crowded  market,  Lazar  says 


Price  changes 

New  enterprise  pricing  for  Verizon 
Wireless  data  services  include: 


Service 

Old  price  New  price 

National 

Access 

$80/ month 

$60/month 

Broadband 

Access 

5M  bytes/$30 

10M 

bytes/$30 

Data  added 

to  America’s 

mwm 

Discount 
of  $5 

Choice  plan 

device  can  switch  to  NationalAccess  net¬ 
work  coverage. 

Verizon  Wireless  also  is  introducing 
BlackBerry  and  PDA/smart  phone  data  ser¬ 
vice  plans  for  customers  with  handheld 
devices.  Customers  purchasing  any  Verizon 
Wireless  BlackBerry  or  PDA/smart  phone 
can  get  data  plans  that  include  10M  bytes 
for  $30  or  unlimited  data  service  for  $50. 


Vonage  offerings 

Business  Plus  VoIP  service  plans 
for  small  and  midsize  companies. 


Number  of 
lines 

Number  of 
minutes 

Monthly 

price 

8 

12,000 

$300 

16 

25,000 

$600 

24 

50,000 

$1,000 

the  smaller  business  user  is  the  ideal  mar¬ 
ket  for  Vonage  to  address. 

Although  Vonage  is  venturing  into  busi¬ 
ness  services,  the  service  provider  says  it  is 
not  planning  enterprise-level  offerings. 

“We  have  no  plan  right  now  to  go  after 
bigger  users,”  Lyons  says.  “We  are  going 
from  residential  to  SOHO  and  into  SMBs. 
It’s  very  easy  to  deploy  even  the  SMB  prod¬ 
ucts  where  not  a  lot  of  resources  are  need¬ 
ed.  When  you  get  to  larger  enterprises, 
every  deal  is  custom  and  they  need  heavy 
hand-holding.  And  that’s  not  what  we’re 
looking  to  do.” 

While  Vonage  will  compete  with  AT&T 
and  MCI  with  its  Business  Plus  service,  nei¬ 
ther  provider  is  aggressively  going  after 
the  lower  end  of  the  SMB  market.* 


This  is  double  the  previous  offer  of  5M 
bytes  for  $30. 

Customers  adding  data  plans  to  any 
America’s  Choice  voice  plan  of  $40  or 
higher  will  receive  a  $5  discount  on  their 
chosen  data  plan. 

The  software  services,  provided  by 
Intellisync,  are  called  Wireless  Sync  Work 
Group  and  Wireless  Sync  Enterprise  Server. 
Wireless  Sync  Work  Group  pushes  Micro¬ 
soft  Exchange  and  Lotus  Domino  group¬ 
ware-based  e-mail,  calendars,  contacts  and 
tasks  to  up  to  20  users  of  Treo,  Fbcket  PC  or 
smart  phone  devices. 

Wireless  Sync  Enterprise  Server  can 
scale  to  support  thousands  of  users, 
Verizon  Wireless  says.  It  provides  secure 
mobile  data  delivery  for  e-mail,  calendar, 
contacts,  tasks  and  other  enterprise  data 
to  Verizon  Wireless  smart  phones  and 
PDAs.  Wireless  Sync  Enterprise  Server 
also  lets  companies  secure  mobile 
devices  and  disable  lost  or  stolen  devices 
over  the  air.  ■ 


Verizon  Wireless  revamps  pricing 
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I’ve  written  a  fair  amount  lately  on  the 
topic  of  “information  stewardship.”  In 
case  you’ve  missed  it,  information 
stewardship  is  the  discipline  of  ensuring 
that  an  organization’s  data  is: 

•  As  accurate  and  complete  as  possible 
(data-quality  management). 

•  Appropriately  secured,  with  access 
granted  only  to  appropriate  parties  (infor¬ 
mation  protection). 

•  Auditable  and  compliant  with  perti¬ 
nent  privacy  and  disclosure  guidelines 
(indexing  and  records  retention). 

•  Stored  on  the  most  appropriate  and 
effective  mechanisms  (information  life- 
cycle  management). 

•  Reliably  backed  up  and  available  in 
the  event  of  a  failure  (business-continuity 
planning  and  disaster  recovery). 

So  far,  I’m  finding  that  few  organizations 
have  a  consistent,  coherent  framework 


The  cost  of  mismanaging  information 


covering  all  these  points  —  much  less  the 
technology  and  processes  to  manage  it. 
Moreover,  most  of  the  companies  tell  me 
that  information  stewardship  (though 
they  usually  don’t  call  it  that)  is  the  single- 
most  critical  strategic  challenge  they’re 
facing. 

I  agree.  While  it’s  hard  to  pin  hard-dollar 
numbers  on  the  cost  of  an  ineffective 
information-stewardship  policy,  several 
recent  events  highlight  the  urgency. 
Recently,  Time  Warner  announced  that  it 
lost  sensitive  data,  including  names  and 
Social  Security  numbers,  for  600,000 
employees.  Time  Warner’s  data  was  on 
back-up  tapes  maintained  by  storage  facil¬ 
ity  provider  Iron  Mountain  and  was  appar¬ 
ently  lost  in  transit  to  the  storage  facility  In 
February  Bank  of  America  lost  back-up 
tapes  containing  credit-card  records  for 
more  than  1  million  government  employ¬ 
ees,  and  ChoicePoint  was  attacked  by 
identity  thieves  who  gained  access  to  sen¬ 
sitive  customer  data. 

That’s  not  all.  Famed  investment  bank 
Morgan  Stanley  was  recently  ordered  to 
pay  a  whopping  $604  million  in  a  legal 
suit,  primarily  because  the  company  said 


The  bottom  line  is  that 
companies  need  to 
move  now  to  create  and 
adhere  to  effective 
information-steward¬ 
ship  policies. 

it  was  unable  to  find  e-mails  pertaining  to 
the  case.  (Effective  records  retention  and 
indexing  is  a  key  component  of  informa¬ 
tion  stewardship.)  And  a  recent  study  by 
Financial  Executives  International  found 
the  average  cost  of  Sarbanes-Oxley  com¬ 
pliance  to  be  $4.4  million,  using  a  base  of 
217  companies  with  average  revenues  of 
$5  billion. 

The  bottom  line  is  that  companies  need 
to  move  now  to  create  and  adhere  to 
effective  information-stewardship  poli¬ 
cies.  Start  an  information  stewardship  task 
force  today,  and  include  participants  from 


within  corporate  finance,  legal  and  com¬ 
pliance  teams,  as  well  as  IT. 

But  that’s  not  enough.  Our  entire  legal 
framework  needs  to  be  revamped  and 
rethought  in  the  context  of  information 
stewardship.  Recent  court  cases  have 
reached  contradictory  conclusions  about 
which  information  can  be  considered  pri¬ 
vate,  or  what  legal  hurdles  are  required  to 
disclose  it.  As  noted  cryptographer  and 
security  guru  Bruce  Schneier  says  in  this 
month’s  Communications  of  the  ACM,  “In 
the  information  age,  virtual  privacy  and 
physical  privacy  don’t  have  the  same 
boundaries.  We  should  be  able  to  control 
our  own  data,  regardless  of  where  it’s 
stored.” 

Amen. 

Step  1  is  for  organizations  to  tackle  the 
problem  within  their  own  boundaries. 
Step  2  is  to  rethink  the  broader  public  pol¬ 
icy  on  information  stewardship  in  the 
context  of  21st  century  technology 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  an  indepen¬ 
dent  technology  research  firm.  She  can  be 
reached  at  johna@nemertes.com. 


's  inside  your  network? 


Beyond  Scan  and  Remove  -  Think  Spyware  Prevention 

Are  Spyware  and  other  Internet  threats  clowning  around  on  your 
network?  SurfControl  Enterprise  Threat  Shield'gives 
you  the  last  laugh.  If  the  threat  is  already  on  a 
user’s  machine,  SurfControl  Enterprise  Threat 
Shield  stops  it  from  running  and  removes  it. 

What  is  more,  SurfControl  Enterprise  Threat 
Shield  prevents  reinfection,  is  enterprise-ready, 
gives  you  centralized  management,  and  is  user 
tamper-proof.  Put  the  kabosh  on  spyware,  key-loggers, 
instant  messaging,  P2P  and  games  before  they  jeopardize  security 
or  productivity. 


FREE  30-day  trial  www.surfcontrol.com/go/threatshield 
or  call:  1.800.368.3366 


SurfControl 


Adaptive  Threat 

v  Intelligence 

First  to  Detect  First  to  Protect 


SurfControl* 

Enterprise  Threat  Protection 
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EtherScope  and  OptiView  -  Two  Portable  Network 
Analyzers  created  to  help  prove  it's  not  a  network 
problem.  Faster.  Quickly  proving  problems  are  not 
network  problems  is  exactly  what  our  portable 
analyzers  are  all  about.  Unlike  a  protocol  analyzer 
or  laptop  freeware,  they  give  you  the  complete  vision 
you  need  to  quickly  and  accurately  diagnose  problems. 
For  example,  you  can  track  down  connectivity 
problems  and  incorrectly  configured  stations,  identify 
causes  of  network  slowdowns  (like  excessive  broad- 


casts)  and  spot  bandwidth  hungry  applications. 


All  with  one  toot:  a  Fluke  Networks'  portable  analyzer. 


Simply  put,  they're  the  best  way  to  prove  it's  not  the 
network's  fault.  And  the  surest  way  to  start;  getting  a 


little  more  respect  around  the  office. 


Prove  it's  not  the  network's  fault.  Faster, 
Visit  www.flukenetwot  ks.com/PNA  to  see 
how  one  of  our  portable  analyzers  can  make 


your  job  easier. 
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•  FleXPoint  PCB  Module  technology  that  positions  the 
compensation  circuitry  directly  at  the  plug's  point  of  contact, 
offering  unbeatable  mated-connection  performance 


•  X-Bar™  Module  termination  technology  that  assures 
accurate  module/cable  termination  and  reduces 
installation  differences 


10GX  is  truly  the  most  advanced  TOG  system  in  the 
marketplace  —  in  fact,  every  other  system  is  just 
treadii  |  water. 


When  It  Comes  to  True  Innovation, 
There  Is  Only  One  Fish  in  the  Pond 


•  SpiralFleX™  Cable  technology  that  increases  randomization 
and  greatly  improves  Alien  Crosstalk  performance 


•  Matrix  I  DC™  Module  technology  which  eliminates  the 
issue  of  Alien  Crosstalk  between  modules,  offering 
performance  30  times  better  than  Cat  6 


For  more  information,  please  call 
Belden  CDT  Networking 
at  1-800-262-9334. 


www.BeldenlBDN.com 


©2005,  Belden  CD-T.  Inc.. 
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Intn  duci  i :  the  Belden  >DN 
System  10GX.  Clearly  the  most 
innovative  UTP  structured  cabling 
solution  in  the  marketplace. 


Sometimes  you  have  to  take  a  big  leap  in  your  thinking 
to  get  to  something  that's  truly  new  —  and  truly  great. 
That's  what  we've  done  with  our  10GX  Solution. 


Our  10GX  Solution  isn't  an  improved  or  boosted  Category  6 
system,  but  a  revolutionary  new  system  designed  around 
a  series  of  dynamic  enabling  technologies  that  deliver  on 
the  two  most  critical  factors  in  10  Gigabit  service:  reduction 
of  Alien  Crosstalk  and  controlled  performance  up  to  a 
minimum  of  5  )  MHz. 


To  accomplish  Beyond  10G™  performance,  we've 
developed  four  totally  new  enabling  technologies  — 
technologies  that  allow  the  Belden  IBDN  System  10GX 
to  deliver  guaranteed  performance  up  to  625  MHz. 


combustible  cable 


DuPont  certified  limited 


Fuel  cells  fire  up  handhelds 


HOW  IT  WORKS 


Direct  methanol  fuel  cell 

A  DMFC  converts  chemical  energy  into  electricity  via 
oxidization  of  methanol.  It  weighs  less  than  a  typical 
lithium-ion  battery  and  offers  longer  usage  times, 
making  it  a  viable  alternative  for  powering  handheld 
electronics  such  as  smart  phones,  PDAs  and  RFID  tag 
readers. 


Fuel  cell 

cathode  side  shown 
(anode  on  other  side) 


O  The  DMFC  system  is  ©  Methanol  is  delivered  ©  Water  returns  from  ©The  fuel  cell  ©  Electronics  control 
refilled  with  methanol,  to  the  fuel  cell.  the  cathode  (air)  produces  the  DMFC  and 

side  to  the  anode  electricity.  interface  it  to  the 
side.  electronics  of  the 

handheld  device. 


■  BY  JUAN  BECERRA 

High-performance  handheld  electronic 
devices  such  as  smart  phones,  video/music 
players,  multi-functional  PDAs  and  RFID 
tag  readers  require  longer  usage  times  than 
power  sources  currently  provide.  Trad¬ 
itional  battery  technologies  are  not  keep¬ 
ing  pace  with  these  demands. 

Direct  methanol  fuel  cells  (DMFC)  offer 
several  advantages  over  lithium-ion  batter¬ 
ies.  Methanol,  otherwise  known  as  methyl 
alcohol  or  wood  alcohol,  is  a  colorless  liq¬ 
uid  commonly  used  in  antifreeze  for  wind¬ 
shield  washer  fluid.  It  is  lighter  than  water 
and  weighs  far  less  than  a  lithium-ion,  mak¬ 
ing  it  a  better  option  for  portable  electron¬ 
ics.  A  DMFC  provides  longer  usage  be¬ 
tween  charges,  increasing  run  time 
between  charges  by  two  to  10  times  over 
the  status  quo  of  current  battery  technolo¬ 
gies.  And  when  a  charge  is  needed,  a  DMFC 
fuel  refill  can  be  easily  swapped  into  place 
without  interruption  of  power. 

Moreover,  methanol  is  inexpensive  and 
widely  available.  A  gallon  of  methanol, 
enough  to  power  a  cell  phone  for  about  10 
years,  costs  only  $10.  A  DMFC  converts 
chemical  energy  into  electricity  via  oxida- 


Got  great  ideas 


■  Network  World  is  looking  for  great 
ideas  for  future  Tech  Updates,  if  you 
want  to  contribute  a  primer  on  a  spe¬ 
cific  technology,  standard  or  protocol, 
contact  Amy  Schurr,  senior  managing 
editor,  features  (aschurr@nww.com). 


tion  of  methanol. 

Fuel-cell  power  packs  include  a  fuel  refill, 
methanol-feed  subsystem,  fuel  cell  and 
electronics  circuits.  The  feed  in  a 
methanol-powered  option  might  include  a 
valve,  pump,  pipes,  filters  or  orifices  on  a 
very  small  scale,  much  like  one  would  find 
in  a  desktop  inkjet  print  head. 

Traditional  DMFC  systems,  also  known  as 
active  systems,  include  a  condenser,  fans, 
pumps  and  fluid-mixing  circuits  to  dilute 
the  methanol  as  it  is  fed  to  the  anode  side 
of  the  fuel  cell.  The  fuel  cell  is  akin  to  a 
chemical  sandwich  with  layers  of  catalysts 
and  membranes  between  an  anode  and  a 
cathode  layer. 

A  more  simplified  approach  is  offered  by 
what  is  called  passive  DMFC  technology 
When  methanol  is  introduced  into  the 
cathode  (entry)  site  of  the  DMFC,  a  chemi¬ 
cal  reaction  occurs  and  the  byproducts  are 
C02  and  water.  In  a  passive  DMFC,  the 
water  required  for  the  process  on  the 
methanol  side  is  transferred  internally 
within  the  fuel  cell  from  the  site  of  water 
generation  on  the  air-side  of  the  cell.  This 
internal  flow  of  water  takes  place  without 
the  need  for  any  pumps,  complicated  re¬ 
circulation  loops  or  other  plumbing. 

A  passive  design  requires  the  DMFC  plat¬ 
form  to  manage  water  in  a  way  that  obvi¬ 
ates  the  need  for  condensing  the  vapor 
from  the  cathode  exhaust,  then  storing  and 
mixing  it  with  methanol  to  maintain  an 
accurate  concentration  of  methanol  and 
water  at  the  anode. 

A  small  battery  is  often  added  to  the 
DMFC  system  to  serve  peak  demands  of 
the  device.  This  hybrid  approach  lets  the 
DMFC  operate  at  its  optimal  level  that 
keeps  pace  with  the  continuous  power  of 
the  device. 


The  passive  design  leads  to  fewer  com¬ 
ponents  and  a  smaller  DMFC  power  pack 
that  could  fit  onto  the  back  of  a  PDA  or  cell 
phone.  Because  components  might 
require  power  to  operate,  having  fewer 
components  yields  longer  usage  time. 

And  having  fewer  components  leaves 
more  space  for  methanol.  Every  cubic  cen¬ 
timeter  of  space  for  methanol  means 
another  2  to  3  hours  of  usage  while  the  fuel 
cell  provides  0.5  watt  of  power  on  average 
to  a  device.  By  comparison, one  cubic  cen¬ 
timeter’s  worth  of  typical  battery  allows 


about  30  to  60  minutes  of  usage  time. 

Finally  with  a  better  power  pack  and  a 
spare  fuel  refill  or  two,  there  are  no  more 
AC  cubes  to  pack  and  carry,  no  more  inter¬ 
national  adapters  to  pack  and  carry  no 
more  car  chargers,  no  more  searching  for 
an  electrical  outlet  and  no  more  waiting 
for  a  charge. 

Becerra  is  vice  president  of  strategic 
planning  and  alliances  at  MTl  MicroFuel 
Cells.  He  can  be  reached  at  juan. 
becerra@mechtech.  com. 


Ask 


Dr.  Internet  By  Steve  Blass 

What  is  a  portlet? 

A  portlet  is  a  Java  Web  component  that  process¬ 
es  requests  and  generates  dynamic  content. 
Portlets  run  inside  portals  and  are  managed  by  a 
portlet  container  similar  to  the  way  Web  services 
are  managed  by  Web  containers  in  the  Java 
world.  Java  Specification  Request  (JSR)  168 
defines  a  set  of  APIs  for  portlets  and  addresses 
standardization  for  preferences,  user  informa¬ 


tion,  portlet  requests  and  responses,  deployment 
packaging,  and  security.  This  lets  the  same  port- 
let  deliver  services  through  any  standards-com- 
pliant  portal  installation.  Oracle  and  others  offer 
commercial  portal  servers  that  support  the  port- 
let  specification,  and  there  are  a  number  of  open 
source  portal  servers  available.  The  portlets 
group  on  Yahoo  (www.networkworld.com, 
DocFinder:  7234)  is  quite  active  and  you  can  find 
open  source  portlet  examples  at  the  Portlet 


Open  Source  Trading  site  on  sourceforge 
(DocFinder:  7235),  which  is  sponsored  by 
Plumtree,  Documentum  BEA  and  Sun.  JBoss 
provides  a  complete  JSR  168-compliant  porta! 
server  bundle  with  a  collection  of  sample 
portlets  for  download  at  DocFinder:  7236. 

Blass  is  a  network  architect  at  Change@Work  in 
Houston.  He  can  be  reached  at  dr.internet@ 
changeatwork.  com. 
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iNSSDE  THE 
NETWORK 
MACHINE 

Mark 

Gibbs 


First  up  this  week:  The  Red  Screen  of 
Death.  “Hold  hard!”  we  hear  you  mut¬ 
ter, “surely  you  mean  the  Blue  Screen 
of  Death?”  Nope,  red  it  is,  at  least  currently 
where  Longhorn  is  concerned. 

In  his  blog  (www.networkworld.com, 
DocFinder:  7227),  Michael  Kaplan,  a 
“Technical  Lead  from  Globalization  infra¬ 
structure,  Fonts,  and  Tools  at  Microsoft,” 
notes  that  he  was  messing  around  with  a 
Longhorn  beta  and  after  doing  some¬ 
thing  evil  to  the  registry  and  booting 
under  Virtual  PC,  he  got  the  fabulously 
ungrammatical  and  totally  unhelpful 
message,  “Info:  An  error  occurred  trans¬ 
ferring  execution”  (yes,  it  really  was 
spelled  that  way)  on  a  screen  with  a  red 
background! 

Kaplan  notes, “I  am  not  sure  I  would  class 
the  change  as  an  improvement.”  Never  was 
a  truer  word  spoken.  We  hope  that  Mr. 
Kaplan  is  flying  beneath  the  executive 
radar  at  Microsoft,  otherwise  he  may  well 
be  going  down  in  flames. 


The  RSOD  and  challenging  responses 


According  to  Microsoft  droids,  this  dis¬ 
play  will  not  be  included  in  the  release  ver¬ 
sion  of  Longhorn,  but  as  reader  Jack  Miller, 
who  brought  this  amusing  diversion  to  our 
attention,  points  out:“Early  versions  of  DOS 
had  better  error  messages  . . .  but  it  seems 
Microsoft  is  going  the  wrong  way  I  can  only 
conclude  this  is  a  planned  journey  to  make 
users  more  dependent  on  Microsoft  and 
increase  their  stronghold  on  the  market. . . . 
That’s  why  I’m  rooting  for  Linux.” 

But  that  isn’t  all  readers  have  been  writ¬ 
ing  in  about.  Morely  Dotes  was  the  first  to 
write  in  after  our  recent  brief  discussion  of 
an  anti-spam  product  called  Qurb  (see 
DocFinder:  7228). 

Dotes,  which  is  not  his  real  name  for  rea¬ 
sons  that  are  unlikely  to  be  cleared  up 
here,  disagrees  with  the  challenge/ 
response  methodology  Qurb  uses:  “I  don’t 
suppose  it  ever  crossed  your  mind  that 
[challenge/response]  systems  reduce 
*your*  spam  problem  by  offloading  it  onto 
unwilling  strangers,  did  it?  People  who  use 
[challenge/response]  systems  are,  inevit¬ 
ably  spammers  themselves.” 

What  Morely  means  is  that  challenging  a 
message  from  a  spammer  who  uses  a  false 
address  will  result  in  the  challenge  request 
going  to  an  innocent  bystander,  the  real 
owner  of  the  abused  address. 


Dotes,  who  runs  an  e-mail  hosting  com¬ 
pany  feels  that  such  an  irritation  should  not 
be  allowed  to  go  unpunished:“As  an  e-mail 
admin,  1  have  a  two-pronged  response  to 
challenges  sent  to  my  users:  1)  I  reply  to  the 
challenge,  so  that  future  spam  using  the 
same  forged  ‘from’  address  will  be  deliv¬ 
ered  to  the  lazy  sod  who  demands  that  my 
users  sort  his  spam  for  him.  2)  I  block  the  IP 
address  of  the  sender  permanently  at  the 
firewall,  so  that  future  contact  from  that 
lazy  sod  is  turned  away  by  the  Border 
Patrol.” 

Dotes  finished  . .  since  you  . . .  have  a 
track  record  of  admiring  ‘solutions’  to  the 
spam  problem  that  only  make  it  worse,  I’m 
having  this  e-mail  archived  for  the  public 
record.”  There  Mr.  Dotes,  we  did  the  public 
record  thing  for  you. 

Of  course,  Dotes  wasn’t  the  only  person 
to  write  in  arguing  against  challenge/ 
response  systems.  Check  out  the  Gibbs 
forum  (DocFinder:  7229)  for  a  well-argued 
letter  on  the  topic. 

We  raised  these  issues  with  the  chaps 
at  Qurb  and  they  pointed  out  that 
the  number  of  challenges  from  chal¬ 
lenge/response  systems  will  be  trivial 
compared  with  the  number  of  bounces 
that  the  owners  of  forged  return  add¬ 
resses  receive. 


The  problems  with  challenge/response 
systems  raise  some  interesting  questions. 
First,  even  when  the  incoming  mail  is  fil¬ 
tered  so  that  obvious  spam  is  removed  and 
obviously  incorrect  challenges  are  not 
sent,  is  the  use  of  challenge/response  ethi¬ 
cal  and/or  reasonable?  We  think  it  is  both, 
but  we’d  like  your  thoughts. 

Second,  do  we  need  a  standard  for  chal¬ 
lenge/response  so  that  its  use  would  be 
generally  acceptable?  This  is  easy:  If  the 
standard  challenge  was  to  include  an 
X-header  (for  example,  “X-Challenge:”) 
followed  by  the  original  message  ID,  then 
when  a  challenge  recipient  gets  a  chal¬ 
lenge  with  an  ID  he  didn’t  create,  he 
would  just  delete  it  sight  unseen.  Voila!  A 
small  increase  in  Internet  traffic,  a  large 
increase  in  the  value  of  e-mail. 

Third,  and  specifically  with  respect  to 
Dotes’  behavior  regarding  challenges:  Is 
Dotes’  way  of  dealing  with  challenges 
commonplace  and  is  it  ethical?  We  sus¬ 
pect  that  it  just  exacerbates  the  overall 
spam  problem  without  extracting  any 
reasonable  or  effective  justice. 

Cry  “Havoc!"  and  let  loose  the  dogs  of 
code  at  gearhead@gibbs.com.  And,  ahem, 
there’s  always  Gearblog  (www.network 
world,  com /weblogs/ gearblog). 


CoolToo 

Quick  takes 
on  high-tech  toys 

By  Keith  Shaw 


After  a  few  weeks  of  craziness  and  travel,  we  finally  got 
some  time  to  try  out  some  new  gizmos.  Here  are  two 
devices  that  have  had  an  honored  space  on  our  desk. 


l,280-by-768-pixel  wide¬ 
screen  display  that  supports 
Sony’s  XBrite  technology  to 
provide  450  nits  of  bright¬ 
ness  and  offer  a  16-millisec 
video  response  time.  The 
monitor  also  is  high-defini- 
tion  TV-ready, supporting  the 
1080i  and  720p  HD  tech¬ 
nologies.  It  includes  several 


The  MFM-HT75W  provides 
multiple  video  sources  on 
one  display. 


video  inputs  for  video  sources  (component,  S-video  and 
composite),  as  well  as  a  choice  between  analog  and  digi¬ 
tal  video  input  (DVI-D)  for  a  computer.  Once  you  have 
installed  multiple  video  sources,  the  display  offers  a  pic¬ 
ture-in-picture  feature  so  you  can  watch  two  different 
video  sources  at  the  same  time. 

Why  it’s  cool:  The  ability  to  provide  multiple  video 
sources  on  one  display  let  us  connect  a  computer,  video 
game  console  and  cable  TV  feed  to  the  same  monitor,  and 
we  still  had  room  to  connect  a  DVD  player  or  a  high-defi- 
nition  cable  converter  (via  the  component  inputs). 

If  you’re  tight  on  space  in  an  office,  dorm  room  or  other 
location,  having  the  convergence  of  these  technologies  is 
a  must.The  sleek  design  also  impressed  us  —  the  bottom 
part  of  the  display  curves  out,  and  it  has  a  picture-frame- 
style  arm  in  the  back  for  size  adjustments  and  provides 
better  balance.  The  display  also  won  style  points  for  hav¬ 
ing  a  simple  remote  control  that  let  us  switch  between 
video  sources  without  button  mashing. 

Grade:  ★★★★★ 


The  scoop:  ThinkPad  X41  notebook,  starting  at  $2,000, 
from  IBM. 

What  it  does:  The  latest  notebook  from 
IBM  is  an  ultra-portable  model  that  weighs 
a  scant  2.7  pounds.The  unique  feature  of 
the  X41  is  the  inclusion  of  a  fingerprint 
scanner  and  security  software  to  pre¬ 
vent  unauthorized  users  from  access¬ 
ing  the  system,  as  well  as  an  easy  way 
to  remember  all  your  passwords  — 

IBM's  ThinkPad  X41  notebook 
gives  you  just  what  you  need  in  a 
lightweight  package. 

they’re  all  accessed 
with  a  swipe  of  a 
finger.  Other  fea¬ 
tures  include  a  12.1-XGA 
display  Intel  Pentium  M  processors, 
the  new  Intel  915GM  Express  chipset,  Secure 
Digital  card  reader  and  two  USB  2.0  ports. 

Why  it’s  cool:  Our  love  affair  with  bulky  notebooks  that 
have  a  million  features  is  over, and  we’re  back  in  love  with 


the  ultra-portable  that  still 
gives  us  everything  we  need 
but  in  a  form  that  won’t  break 
our  back  when  we  travel. 

About  the  only  thing  we 
couldn’t  do  with  the  X41  was 
watch  a  DVD,  but  you  can 
always  get  the  optional  dock 
in  order  to  add  the  optical 
drive.  The  integrated  wireless 
LAN  connectivity  worked 
fine,  and  the  included  soft¬ 
ware  let  us  find  hot  spots 
quickly  and  easily. 

IBM  does  an  outstanding 
job  of  adding  features  that 
business  users  (and  their  IT  support  group)  want.  It’s  no 
different  with  the  fingerprint  scanner  and 
software  —  it  was  easy  for  us  to 
enroll  our  fingerprints  and 
choose  different  security  set¬ 
tings  and  options.  After  our  en¬ 
rollment  we  only  messed  up  once 
when  we  tried  to  log  on,  mostly 
because  our  finger  was  off-center 
and  we  did  a  fast  scan. 

The  built-in  SD  card  reader  was  a 
nice  bonus  —  we  could  quickly  take 
the  card  out  of  our  digital  camera  and 
upload  photos  without  using  a  sepa¬ 
rate  card  reader  or  camera  cable. 
Grade:  (out  of  five) 

The  scoop:  MFM-HT75W  widescreen  TV/LCD 
monitor,  about  $800,  from  Sony. 

What  it  does:  This  17-inch  widescreen  display  combines 
a  TV  tuner  with  an  LCD  monitor  that  lets  users  connect 
almost  any  type  of  video  source  to  it.  The  HT75W  has  a 


Shaw  can  be  reached  at  kshaw@nww.com. 


The  blade  made  for  Linux.  The  tools  to  make  it  better. 


Put  a  world  leader  in  blades  and  Linux  to  work  for  you.  More  and  more  businesses  are  finding  that  HP  BladeSystem  servers  are  the  tool  their  data  center  needs. 
One  reason  is  that  HP's  blades  are  optimized  for  Linux.  Not  only  do  they  ship  with  powerful  software  tools,  like  HP  Systems  Insight  Manager™  and  ProLiant 
Essentials,  they  also  run  key  Linux  apps  from  software  partners  like  PeopleSoft  and  Oracle.  And  with  powerful  AMD  Opteron™  Processors,  you  get  maximum 
performance  now  as  well  as  the  flexibility  to  transition  to  64-bit  computing  now  or  in  the  future.  In  short,  HP  offers  you  the  advantages  of  blades,  Linux 
and  legendary  HP  reliability  all  in  one  neat,  affordable  package.  Get  more  support,  technology  and  advice  from  HP.  So  you  can  build  the  I.T.  you  need. 


HP  ProLiant  BL25p  Blade  Server 


HP  ProLiant  BL35p  Blade  Server 


THE  SOLUTIONS 


•  BL25p:  2  AMD  Opteron™  Processors  Model  200 
(up  to  2.60GHz) 

•  BL35p:  2  AMD  Opteron™  Processors  Model  200 
(2.40GHz) 

■  BL25p:  Up  to  48  servers  per  rack 

■  BL35p:  Up  to  96  servers  per  rack 

•  HP  Systems  Insight  Manager™  for  Web-based 
networked  management  through  a  single  console 

•  Rapid  Deployment  Pack  for  ease  of  deployment 
and  ongoing  provisioning  and  reprovisioning  in 
Linux-mixed  OS  environments  (optional) 


THE  BENEFITS’ 

•  Up  to  23%  savings  on  acquisition  cost 

•  Up  to  23%  less  power  consumption 

•  Up  to  93%  fewer  cables 

•  43%  less  space  needed  for  same  number  of 
processors 

•  Hot-swappable  server  design 

•  Single  interface  for  local  and  remote  management 
of  servers,  storage,  software  and  networking 


Enhance  your  system. 


HP  STORAGEWORKS  MSA1500CS 

-  Up  to  24TB  of  capacity  (96  250GB  SATA  drives)  -  Up  to  16TB  of  capacity 
(300GB  SCSI  drives)  -  Ability  to  mix  SCSI  and  Serial  ATA  enclosures  for 
greater  flexibility  -  2GB/1GB  Fibre  connections  to  host  flexibility 


Save  up  to  $844  on  the  4-hour  response,  24-hour-a-day,  3-year  warranty  upgrade2 


Save  $1,744  when  you  purchase  an  HP  BladeSystem  enclosure 
and  8  BladeSystem  Management  Suite  Licenses.3 

CALL 

1-866-625-3909 

CLICK 

www.hp.com/go/bladesmag52 

CONTACT 

your  local  reseller 

invent 


1.  Based  on  internal  HP  testing;  compared  to  similarly  configured  HP1U,  2P  server  with  SAN  connectivity.  For  configurator,  please  visit;  http://h30099.www3.hp.com/configurator/catalog-issipc.asp.  2.  Offer  valid  through  7/31/05  on 
purchase  of  four-hour  response,  24-hour-a-day,  three-year  warranty  upgrade  for  MSA  1000  or  MSA  1500  products.  3.  Offer  valid  through  8/31/05  on  purchase  of  HP  BladeSystem  enclosure  and  eight  BladeSystem  Management 
Suite  licenses.  Offers  valid  in  U.S.  only.  Offers  cannot  be  combined  with  any  other  offer  or  discount  and  are  good  while  supplies  last.  See  Web  site  for  full  details.  Linux  is  a  U.S.  registered  trademark  of  Linus  Torvalds.  Oracle  is  a  registered 
U.S.  trademark  of  Oracle  Corporation,  Redwood  City,  California.  AMD,  the  AMD  Arrow  Logo,  AMD  Opteron  and  combinations  thereof  are  trademarks  of  Advanced  Micro  Devices,  Inc.  ©2005  Hewlett-Packard  Development  Company,  L.P. 
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John  Gallant 

Another  angle 
on  the  Cisco/ 
Juniper  battle 

At  Interop, the  show  floor  was  abuzz  with  talk  about 
the  growing  battle  between  Cisco  and  Juniper  for 
the  hearts  and  minds  of  enterprise  customers. 

In  speeches  by  their  CEOs,  and  in  much  of  the  analysis 
offered  by  pundits,  the  Cisco-Juniper  tilt  was  described 
as  a  contest  between  their  one-stop-shopping  and  best- 
of-breed  approaches.  Cisco  is  vulnerable  to  market 
share  losses  from  hot  products,  particularly  in  high- 
growth  segments,  so  its  message  is  all  about  the  value 
of  end-to-end  integration.  Juniper  can’t  match  Ciscos 
portfolio,  so  it  emphasizes  the  robustness  of  its  point 
solutions. 

But,  in  an  interesting  take,  EzeCastle  Research  says  the 
real  battle  will  focus  on  how  well  the  companies  sup¬ 
port  the  onslaught  of  Web  services  applications. 

“Web  services  is  where  networks  and  applications  con¬ 
verge,  ”  EzeCastle  writes.“Cisco  has  been  positioning 
itself  as  an  element  in  Web  services  solutions  for  some 
time,  but  primarily  as  a  suitable  network  platform,  rather 
than  an  active  participant.  [But  at  a  recent]  analyst 
event,  [CEO  John]  Chambers  commented  that  future 
networks  would  ‘switch  messages’  the  term  used  in  Web 
services,  and  a  Cisco  engineering  [vice  president]  com¬ 
mented  that  the  network  could  offload  Web  services 
handling  from  servers. 

“Juniper’s  use  of  the  term  ‘Infranet’  in  connection  with 
its  recent  application  access  control  and  security 
announcement  [the  Enterprise  Infranet]  seems  to  indi¬ 
cate  Juniper  will  be  adopting  Web  services  in  its  enter¬ 
prise  products,  as  well. 

“We  think  this  is  the  real  collision  point  between  the 
two  companies. To  get  to  a  higher  level  of  strategic 
engagement  with  customers. . .  Cisco  needs  Web  ser¬ 
vices  as  a  bridge  between  IT  and  networking. To  hop  to 
the  next  area  of  strategic  importance,  Juniper  needs  to 
hop  to  Web  services.The  firms  are  on  a  collision  course 
in  the  area  of  Web  services  support  on  the  network.” 

EzeCastle  lists  a  number  of  products  that  become  criti¬ 
cal  in  this  battle  and  predicts  a  slew  of  announcements 
or  acquisitions  by  Cisco  and  Juniper  related  to  those 
segments  in  2005  and  2006. 

When  we  launched  our  ongoing  New  Data  Center 
reporting  initiative  last  year,  we  committed  to  helping 
you  understand  how  services-oriented  applications 
would  change  the  network  landscape  and  the  plans  of 
your  strategic  vendors.  Cisco  and  Juniper  aren’t  the  only 
companies  that  will  morph  their  strategies  to  address 
this  sea  change  in  applications,  but  their  fight  will  be 
one  of  the  most  fascinating  and  illuminating. 

—  John  Gallant 
Editorial  director 
jgallant@nww.  com 
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Broadband  thoughts 

Regarding  JohnaTill  Johnson’s  column, “Why  do  we 
need  a  national  broadband  policy?”  (www.network- 
world.com,  DocFinder:  7225):  My  company  sells 
broadband  over  power  line  equipment.  Unlike  a  lot 
of  companies,  we  also  sell  other  wired  and  wireless 
technologies  on  the  premise  that  it  is  better  to  have 
the  options  to  find  a  solution  for  the  customer’s 
problem  than  it  is  to  try  to  fit  the  customer’s  problem 
into  your  solution. 

Sometimes  the  industry  loses  sight  of  the  fact  that 
there  still  are  many  people  who  are  perfectly  con¬ 
tent  with  Windows  95  and  a  dial-up  connection,  or 
have  no  interest  in  the  Internet  at  all.  In  most  cases, 
the  best  thing  government  can  do  is  encourage 
progress  but  let  the  marketplace  take  care  of  itself.  If 
there’s  enough  demand  for  somebody  to  make  a 
buck,  somebody  will  provide  the  service. 

Jerry  Brittain 
Salem, Va. 

I  agree  with  the  basic  premise  of  Johna  Till 
Johnson’s  column  on  broadband  deployment  and 
uptake  in  the  U.S.  I  would  like  to  point  out  one  area 
that  remains  unaddressed:  Broadband  access  in  less 
dense  areas,  which  can  be  surprisingly  close  to  met¬ 
ropolitan  areas.  I’m  more  than  willing  to  pay  for 
broadband,  but  I  live  in  a  rural  area  about  12  miles 
south  of  Madison,  Wis.,  a  very  dense  metropolitan 
area  with  at  least  two  broadband  options  available. 
Even  in  the  village  closest  to  me,  Charter, Verizon  and 
SBC  have  only  equipped  the  densest  areas  with 
broadband;  the  rest  of  us  are  left  out  or  forced  to 
contemplate  satellite,  which  appears  not  only  too 
expensive,  but  poorly  performing,  as  well. 

So  while  I  agree  with  Johnson’s  premise,  there  is 
definitely  a  large  part  of  the  U.S.  that  will  likely  not  be 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief,  Network  World,  1 18  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  verification. 


covered  with  broadband  without  some  sort  of 
incentive,  although  I’m  still  pinning  my  hopes  on 
WiMAX  or  possibly  WildBlue. 

Mark  Porter 
Network  manager 
CUNA  Mutual  Group 
Madison, Wis. 


Tiger  tale 


Regarding  Dave  Kearns’  column, “Apple:  Predator  or 
protagonist?”  (DocFinder:  7226):  The  problem  with 
basing  a  review  of  Tiger  on  the  San  Jose  Mercury 
News  story  is  that  the  newspaper  doesn’t  get  down 
to  the  nitty-gritty  of  why  Tiger’s  features  are  innova¬ 
tive.  For  example,  with  Spotlight,  files  are  indexed  as 
they’re  being  written,  so  you  never  have  to  wait  for 
an  indexing  process  because  as  soon  as  a  file  has 
been  written,  the  operating  system  knows  about  it. 

And  Apple’s  had  the  ability  to  “fetch...  up-to-the- 
minute  stock,  weather  and  flight  information”  since 
before  2000  via  its  Sherlock  search  tool. What  makes 
Dashboard  innovative  is  that  it’s  available  all  the 
time,  at  the  touch  of  a  function  key  —  there’s  no 
waiting  for  it  to  boot. 

These  are  just  a  couple  of  examples.  If  you  dig  into 
it  a  little, you’ll  find  a  lot  of  innovative  features  in  Mac 
OS  X  10.4. 


Krishen  Greenwell 
Sarasota,  Fla. 


At  this  time  Apple  is  immune  from  antitrust  consid¬ 
eration,  which  typically  kicks  in  at  about  70%  market 
share.  Hopefully  Apple  will  achieve  that  kind  of  mar¬ 
ket  share  in  a  few  years. 

The  reason  Tiger  is  big  news,  simply  put,  is  that  it  is 
a  Unix-based,  secure,  ease-to-use,  quality  piece  of 
work.  None  of  these  words  describe  Windows  XPor 
will  described  presume, “Longshot.” 

Thomas  Barta 
Durham,  N.C. 
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Find  out  what  readers  are  saying  about  these  and  other  topics. 
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ENTERPRISE  APPLICATIONS 

Sandra  Gittlen 

Presence-aware.That’s  the  term  collabo¬ 
ration  software  makers  are  using  to 
describe  all  the  goodies  they  are 
putting  in  their  programs,  including  instant 
messaging,  Web  and  audioconferencing, 
and  IP  telephony 

Vendors  such  as  Microsoft,  IBM/Lotus  and 
Novell  are  rushing  to  make  not  only  their  traditional  collaboration 
tools  presence-aware,  but  also  their  productivity  tools.  For  instance, 
Microsoft  is  integrating  its  Live  Communications  Server  2005  features 
with  Outlook,  Word  and  other  applications.  IBM/Lotus  is  doing  the 
same  with  its  Domino  and  Notes  suites. 

The  goal  is  to  let  users  instantly  communicate  with  each  other  with¬ 
out  having  to  leave  their  core  applications.  For  instance,  call  center 
operators  can  stay  within  a  CRM  application  and  still  locate  an 
expert  to  answer  a  question  for  them  via  IM.  Users  can  call  a  col¬ 
league  via  IP  telephony  to  discuss  edits  to  a  shared  document. 

This  is  great  innovation,  but  IT  organizations  need  to  be  prepared 
for  all  that  comes  with  instant  communication.They  need  to  educate 
users  on  the  appropriate  use  of  these  tools  and  help  their  companies 
understand  infrastructure  and  resource  needs,  as  well  as  set  policies. 

Some  things  to  consider:  What  are  the  ramifications  for  bandwidth, 
especially  when  you  tie  in  instant  Web  videoconferencing  and  IP 
telephony  calls?  Do  you  have  the  budget  for  software  licenses  and 
gear  to  outfit  the  whole  company?  How  will  all  this  communication 
be  monitored  for  compliance  and  auditing  purposes?  Do  you  have 
adequate  enterprise  storage  silos  and  filtering  tools  to  handle  real¬ 


The  art  of  collaboration 


time  transcripts?  If  they  are  to  be  used  for  business,  then  they  are 
held  to  the  same  standards  of  record-keeping  as  e-mail  and  other 
types  of  business  communications. 

Before  IT  groups  jump  headfirst  into  the  world  of  presence-aware, 
they  should  have  a  heart-to-heart  with  business  units  throughout  the 
organization.  Figure  out  who  would  benefit  from  the  applications  vs. 
who  would  be  distracted  by  them.  Does  data  entry  need  IM  capabil¬ 
ities  or  would  that  slow  them  down?  Will  the  salesforce  need  24-hour 
help  desk  availability  to  remotely  use  the  tools  ? 

Also,  consider  the  security  risks  involved  in  instant  communica¬ 
tions.  You  might  need  to  install  tools  that  encrypt  messages  end  to 
end.  If  you  are  in  a  highly  regulated  industry,  you’ll  also  want  to 
employ  software  that  monitors  chat  sessions  and  sends  out  alerts 
when  something  is  amiss.  Establish  policies  ahead  of  time  to  deter¬ 
mine  when  intellectual  property  is  being  compromised  and  how 
these  policies  will  be  reinforced. 

You  also  need  to  set  up  benchmarks  to  review  how  the  tools  are 
being  used.  This  will  prove  whether  they  are  boosting  or  draining 
productivity.  Tweaks  to  policies  and  usage  will  need  to  be  made 
along  the  way  —  it’s  not  an  install-once-and-leave-it-alone  network. 

While  software  companies  would  like  you  to  believe  that  collabo¬ 
ration  is  for  everyone, your  company  must  think  long  and  hard  about 
parameters  for  these  tools.  Otherwise,  you  might  create  a  bigger 
headache  than  you  bargained  for. 


The  goal  is  to  let 
users  instantly 
communicate 
with  each  other 
without  having  to 
leave  their  core 
applications. 


Gittlen  is  a  freelance  technology  editor  in  Northborough,  Mass.  She 
can  be  reached  at  sgittlen@charter.net. 


ON  SECURITY 

Winn  Schwartau 

This  is  my  first  column  written  on  a  Mac 
—  ever.  Maybe  I  should  have  done  it  a 
long  time  ago,  but  I  never  said  I  was 
smart,  just  obstinate.  I  was  a  PC  bigot. 

But  now, I’ve  had  it.  I’m  mad  as  hell  and  I’m 
not  going  to  take  it  anymore. 

In  the  coming  weeks  I’m  going  to  keep  a 
diary  of  an  experiment  my  company  began  at  6  p.m.  April  29,2005  — 
an  experiment  predicated  on  the  hypothesis  that  the  WinTel  platform 
represents  the  greatest  violation  of  the  basic  tenets  of  information 
security  and  has  become  a  national  economic  security  risk.  I  do  not 
say  this  lightly,  and  1  have  never  been  a  Microsoft  basher,  either.  I 
never  criticize  a  company  without  a  fair  bit  of  explanation,  justifica¬ 
tion  and  supportive  evidence. 

I  have  come  to  the  belief  that  there  is  a  much  easier,  more  secure 
way  to  use  computers.  After  having  spent  several  years  focusing  my 
security  work  on  Ma,  Pa  and  the  Corporate  Clueless,  I  also  have  come 
to  the  conclusion  that  if  I’m  having  such  security  problems,  heaven 
help  the  98%  of  humanity  who  merely  want  a  computer  for  e-mail 
and  multimedia. 

Even  though  I’m  a  security  guy  going  on  22  years  now,  my  day-to- 
day  work  is  pretty  much  like  everyone  else’s.  I  live  on  laptops  and  use 
my  desktops  at  home  and  the  office  for  geeking  and  experimenting. 
My  two  day-to-day  laptops  (two,  for  24/7  backup)  are  my  business 
machines.  I  don’t  need  them  to  do  a  whole  lot  —  except  work  reli¬ 
ably,  which  is  why  I  am  fed  up  with  WinTel. 

I  want  my  computer  to  function  every  time  I  turn  it  on.  I  want  my 
computer  to  not  corrupt  data  when  it  does  crash.  I  use  a  handful  of 
applications:  Microsoft  Office,  e-mail,  browser,  FTP  client  and  some 
multimedia  toys.  Regardless  of  format,  they  should  work  without 
crashing. 

I  live  on  the  ’Net.  I  do  not  want  my  browser  to  eat  up  all  of  my  mem¬ 
ory.  In  the  WinTel  world  I  need  an  assortment  of  third-party  tools  to 


Mad  as  hell,  switching  to  Mac 


try  to  keep  my  PC  alive.That’s  just  crazy. 

Why  does  WinTel  have  these  problems?  I  have  heard  all  sorts  of  expla¬ 
nations, and  I  don’t  subscribe  to  any  of  them.  I’ve  come  up  with  my  own 
(hopefully  rational)  reasons  WinTel  will  fail  —  and  has  to  fail: 

•  Windows  is  complex,  trying  to  be  everything  to  everyone.  This 
complexity  comes  at  a  terrible  price:  downtime,  help  desks, 
upgrades,  patches  and  the  inevitable  failures. 

•  When  a  new  operating  system  or  service  pack  is  released,  there 
are  tons  of  changes  to  the  functionality. 

•  WinTel  machines  use  different  versions  of  BIOS. They  are  not  all 
equal,  nor  do  they  all  have  the  same  level  of  compatibility. 

•  Some  Windows  software  applications  are  well  written;  others  take 
shortcuts.  Shortcuts  may  work  in  some  environments,  but  not  all,  and 
ultimately  the  consumer  pays  in  lost  time,  availability  and  productivity 

•  Hardware.  There  are  hundreds  of  “WinTel-compatible”  mother¬ 
boards,  each  claiming  to  be  better  than  the  next.  Whatever. 

•  Memory  Not  all  FL\M  is  equal.  Some  works  well.  Cheap  stuff  doesn’t. 

•  Hard  disks.  Same  problem:  cheap  or  reliable. Your  call. 

Here’s  my  answer  to  the  WinTel  problem:  We  need  an  open  Simple 
Operating  System  (SOS)  that  meets  the  needs  of  the  majority  of  peo¬ 
ple  who  buy  PCs  for  everyday  home  and  enterprise  tasks.  Get  rid  of 
the  complexity  and  simplify  the  interface  between  SOS,  BIOS  and 
hardware.  In  other  words,  KISS. You  know  what  it  means.  KISS  SOS. 

Because  SOS  doesn’t  exist  yet,  my  company  has  given  up  on  WinTel. 
We  have  successfully  moved  to  Mac  in  less  than  two  days.Think  about 
it:  a  security-friendly  alternative  that  works  and  doesn’t  require  gobs  of 
third-party  utilities  to  safely  perform  the  most  mundane  tasks.  Please 
follow  the  details  of  our  experiment  at  www.securityawareness.blog 
spot.com.  It’s  already  way  more  interesting  than  I  thought  it  would  be. 


I  want  my  com¬ 
puter  to  function 
every  time  I  turn 
it  on.  I  want  my 
computer  to  not 
corrupt  data 
when  it  does 
crash. 


Schwartau  is  a  security  writer,  lecturer  and  president  of  Interpact,  a  secu¬ 
rity  awareness  consulting  firm.  He  can  be  reached  at  winn@thesecu 
rityawarenesscompany.  com. 


■  BY  CAROLYN  DUFFY  MARSAN 


Ready  to  back  out  of  your  driveway,  you  put  the  car  in  reverse  and  press 


the  gas.  Nothing  happens.You  get  out  and  find  your  neighbor’s  child  on  a 
tricycle  behind  the  car  and  below  your  field  of  view  Your  car  was  smart 
enough  not  to  go. 


Sound  far-fetched?  Not  according  to  engineers  who 
specialize  in  automotive  electronics. 

The  development  of  high-speed,  integrated  communica¬ 
tions  systems  that  link  what  were  stand-alone  systems  — 
such  as  the  engine  and  braking  systems  —  could  make  so- 
called  virtual  bumpers  possible  in  five  to  10  years. 

Already  30%  of  the  cost  of  a  new  car  is  in  the  electron¬ 
ics:  the  chips,  wires  and  networks  that  support  features 
ranging  from  automatic  door  locks  to  anti-lock  brakes  to 
airbag  deployment.Today’s  cars  have  more  computing 
power  than  was  used  in  the  Apollo  moon  landing  more 
than  30  years  ago. 

And  carmakers  plan  to  pack  in  more. To  complement 
existing  satellite-delivered  navigation,  motorist-aid  ser¬ 
vices,  and  built-in  cell  phones  and  entertainment  sys¬ 
tems,  manufacturers  will  add  everything  from  in-vehicle 
Internet  access  to  remote  maintenance  services  that  can 
troubleshoot  problems  and  identify  misbehaving  parts 
before  they  fail. 

“Vehicles  are  becoming  computing  platforms  that  can 
access  any  data  at  any  time,”  says  Jim  Colson,  a  distin¬ 
guished  engineer  with  IBM  working  on  automotive  elec¬ 
tronics  systems.'A  zillion  new  information 
services  are  possible  when  you  add  network 
capability  to  the  vehicle  in  conjunction  with 
network  capability  on  other  devices.” 

As  automotive  electronics  become  more 
complex,  car  manufacturers  are  borrowing 
a  page  from  the  network  industry  relying 
on  shared  networks  and  standard  proto¬ 
cols  to  support  internal  communications 
between  control  systems.They’re  also  turning  to  industry 
standards  such  as  Bluetooth  and  Wi-Fi  to  support  links  to 
external  systems  that  provide  traffic,  weather,  entertain¬ 
ment  and  other  information. 

Under  the  hood 

Today’s  cars  have  a  half-dozen  different  proprietary  net¬ 
works  that  carry  messages  from  control  systems  to  the 
devices  being  operated.  Until  recently  each  car  manufac¬ 
turer  and  car  model  had  its  own  network  parts.These  are 
hardened,  automotive-specific  networks  with  ultra-reli¬ 
able  electronic  components  that  can  withstand  vibration 
and  operate  in  extreme  heat  and  cold. 

The  latest  trend  is  toward  standardization  so  car  manu¬ 
facturers  can  save  money  on  components  and  software 


development.“Car  manufacturers 
across  the  globe  are  moving  to 
standards  because  if  they  have  a 
single  network  it  cuts  down  on 
the  number  of  connectors  and 
controllers  required,  and  it 
reduces  design  and  production 
costs,” says  Dan  Benjamin,  an 
automotive  research  analyst 
with  ABI. 

Companies  are  con¬ 
verging  on  several 
standards  for  internal 
networks  that 
address  different 
speed  require¬ 
ments  (see 
graphic,  page 
74).  “There’s 
a  lot  of 
work 
across  all 


New  automatic  toll-paying  systems 

use  Dedicated  Short  Range  Com- 

munications,  an  emerging  6M  to 

54M  bit/sec,  two-way  wireless  syp- 

tern  that  might  be  used  to  download 

files  and  music. 
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Drivers  and  passen¬ 
gers  will  be  able  to 
download  music  files 
or  the  latest  naviga¬ 
tional  maps  using  Wi¬ 
Fi,  which  is  the  tech¬ 
nology  most  likely  to 
provide  in-vehicle 
Internet  access. 


Car  makers  are  migrating  to  stan¬ 
dard  network  protocols,  inter¬ 
faces  and  chipsets  for  controlling 
everything  from  engine  and  brak¬ 
ing  systems  to  power  windows 
and  door  locks. 


Digital  satellite  radio  will  let  drivers 
download  real-time  news,  informa¬ 
tion  and  entertainment  services. 


Bluetooth  will  be  used  to  link 
cell  phones  to  built-in  micro¬ 
phones  and  speakers,  allow¬ 
ing  for  hands-free  calling. 
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Car  makers  are  developing  remote 
monitoring  services  that  can  be 
used  to  schedule  preventative  main 
tenance  checks  and  run  diagnostic 
tests  that  help  prevent  breakdowns. 


the  car  manufactur¬ 
ers  to  get  these  to  be 
industry  standards,”  says 
Dennis  Bogden,  director 
of  powertrain  electronics 
for  General  Motors.'Tf  you 
need  a  high-speed  data  link  you 
grab  this  one,  and  if  you  need  a 
low-speed  data  link  you  grab  another 
one. We’ve  quit  trying  to  have  differences 
in  this  underlying  technology’ 

At  the  same  time  carmakers  are  looking  to 
extend  the  use  of  those  networks  to  replace  the 
spaghetti  of  wire  used  to  support  functions  such  as 
turning  on  the  engine  and  operating  lights. 


The  connected  car 

Network  advances  will  address  every¬ 
thing  from  in-car  entertainment  to  vehicle 
diagnostics  and  safety. 


tics  because  information  on  the  network  gets  shared.” 

But  those  are  just  the  network  advances  that  are  help¬ 
ing  carmakers.  Most  of  the  other  advances  are  designed 
to  appeal  to  buyers. 

Hands-free 

Take  built-in  wireless  communications.  More  carmak¬ 
ers  are  going  wireless  to  support  a  host  of  new 
navigation  and  safety  services. 

Bluetooth  is  the  technology  of 
choice  to  support  cell  phones.  The 
auto  industry  is  developing  a 
special  profile  of  the 


Emerging  motorist  assistance  services,  such  as 
General  Motor’s  OnStar,  provide  two-way  voice  and 
data  communications  links,  to  deliver  verbal  direc¬ 
tions,  answer  questions  and  even  unlock  cars. 


With  advance¬ 
ments  in  compres¬ 
sion  techniques  and 
smaller  antennas, 
digital  satellite 
radio  could  deliver 
streaming  video. 


Virtual  bumpers  will 

have  sensors  that  can 

stop  the  car  if  something 

is  blocking  the  path. 

compares  with  seven  manufacturers  that  offered  the 
technology  in  2004. 

Longer  term,  car  manufacturers  plan  to  use  Bluetooth 
to  support  services  such  as  remote  vehicle  diagnostics, 
advanced  safety  features  and  vehicle-to-vehicle  commu¬ 
nications,  ABI  Research  says. 

“We’re  seeing  a  couple  different  [automotive  informa¬ 
tion]  services  use  Bluetooth  as  the  data  link  to  the  service 
provide^’ says  Frank  Viquez,  director  of  automotive  re¬ 
search  at  ABI.“This  cuts  down  on  the  hardware  and  ser¬ 
vice  costs  because  the  driver  owns  the  phone  and  pays 
for  the  call.” 


Back-seat  entertainment 

But  Bluetooth  is  only  one  of  the  technolo¬ 
gies  that  are  emerging  to  connect  the  com¬ 
puter-based  car  to  the  outside  world. The 
rising  demand  for  in-vehicle  entertainment 
services  has  carmakers  looking  at  every¬ 
thing  from  satellite  links  to  Dedicated  Short 


“As 

we  contin¬ 
ue  to  get  better 
data  links  and  higher- 
speed  data  links,  we’re 
putting  more  information 
on  these  data  links  and 
[relying]  less  on  hard 
wires,”  Bogden  says.That 
takes  away  from  having 
to  have  wires,  which  cost 

a  lot  and  add  a  lot  of  weight.” 

These  networks  “reduce  our  costs  and  enable  us  to 
introduce  technology  faster,”  says  Martin  Yagley,  director 
of  audio,  telematics  and  driver  information  systems  at 
Chrysler. “The  benefit  to  the  buyer  is  improved  diagnos- 


Shared  data  networks  are 
replacing  individual  wires  and 
dedicated  networks  used  to 
control  electronic  components 
to  simplify  car  wiring. 


Bluetooth 
standard  — 
dubbed 
Bluetooth 
Handsfree  2.0 
—  that  will  link 
a  built-in  micro¬ 
phone  in  the 
car  to  any  cell 
phone  without 
requiring  a  dock¬ 
ing  station,  allowing 
for  hands-free  calling. 
“Every  car  manufactur¬ 
er  will  have 
Bluetooth  up  and 
running  in  high  vol¬ 
ume  —  200,000 
units  per  year  — 
within  five  to  seven 
years,”  predicts  Paul 
Hansen,  publisher 
of  the  Hansen  Report  on  Automotive  Electronics  in 
Portsmouth,  N.H.  Hansen  says  Bluetooth  represents  the 
first  general-purpose  network  standard  that  the  automo¬ 
tive  industry  has  embraced. 

Acura  and  Daimler-Chrysler  are  already  shipping  cars 
with  Bluetooth  hands-free  calling  devices  that  are  integrat¬ 
ed  with  navigational  systems  and  radios.  Drivers  can  place 
calls  by  simply  saying  a  telephone  number.. The  systems 
can  also  dial  numbers  brought  up  by  the  car’s  navigation 
system,  say  for  a  restaurant.  Calls  are  controlled  via  buttons 
on  the  dashboard  and  use  a  car’s  speaker  system. 

Seventeen  car  manufacturers  will  offer  Bluetooth-based 
communications  options  in  their  2005  production  vehi¬ 
cles,  according  to  the  Telematics  Research  Group. This 


Anti-collision  applications  are 
under  development  that  would 
allow  a  stopped  vehicle  to  com¬ 
municate  to  approaching  vehi¬ 
cles,  warning  them  to  slow  down. 


Range  Communications  (DSRC)  and  Wi-Fi. 

Nearly  10%  of  vehicles  sold  last  year  had  back-seat  enter¬ 
tainment  systems,  according  to  Telematics  Research 
Group,  which  estimates  that  figure  will  rise  to  25%  by  2010. 

On  the  horizon  are  real-time  news,  information  and 
entertainment  services  that  are  integrated  with  in-vehicle 
entertainment  systems.The  most  promising  way  to  deliver 
these  services  is  digital  satellite  radio.  With  improvements 
in  compression  techniques  and  smaller  antennas,  digital 
satellite  also  could  deliver  streaming  video. 

“The  newest  thing  as  far  as  wireless  data  is  satellite 
radio,”  Viquez  says.“It’s  one-way  communications.You  can’t 
have  an  uplink,  but  the  downlink  is  being  used  to  offer 
some  basic  services  into  the  vehicle.” 

Although  the  main  focus  of  satellite  is  to  provide  enter¬ 
tainment  services,  the  technology  also  could  support  car 
safety  or  navigational  systems.“Satellites  are  going  to  be 
used  to  deliver  a  lot  more  capabilities,”  Viquez  predicts. 
“High-definition  radio  receivers  will  start  shipping  in  some 
cars  next  year,  and  advanced  applications  for  traffic  and 
weather  have  been  demonstrated.That  wouldn’t  be  hard 
to  integrate  with  a  telematics  or  navigational  system.” 

Another  technology  that  could  bring  high-speed,  two- 
way  communications  to  automobiles  is  DSRC.  DSRC  was 
designed  specifically  for  the  transportation  industry  to 
complement  cellular  communications,  supporting  6M  to 
54M  bit/sec  wireless  data  transfer  rates.  Mercedes-Benz 
has  started  shipping  cars  with  DSRC  support  in  Germany 

“They  have  a  DSRC  toll-collection  system  in  Germany 
that  is  launching  full  scale  in  January, ’’Viquez  says.’Any  car 
that  is  made  for  that  market  is  going  to  have  DSRC.”  DSRC 
ultimately  could  support  high-speed  downloads  of  files 
and  music,  he  says. 

Further  out  on  the  horizon  is  in-vehicle  support  for  Wi-Fi 
technology“By  around  2006,  some  car  manufacturers  will 
be  looking  to  install  self-contained  Wi-Fi  to  allow  users  to 
load  music  and  files  into  the  car, "Viquez  says.“With  20G 
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or  40G  of  hard  disk  in  the  car,  this  is  some¬ 
thing  manufacturers  can  do  without  offer¬ 
ing  any  services.  Users  could  download 
files  and  other  content  to  the  car  such  as 
traffic  reports  or  news.” 

Then  gas  stations  could  install  hot  spots 
and  start  offering  new  information  ser¬ 


vices  to  drivers.“You  could  update  your 
navigational  maps  in  your  car  based  on 
current  construction  maps  as  part  of  your 
gas  station  experience,”  Colson  says. 

“We’re  trying  to  develop  a  user-friendly 
interface  so  customers  using  their  home 
entertainment  systems  can  seamlessly 


download  content  into  their  vehicles,” 
Yagley  says.  “The  vision  with  Wi-Fi  is  that 
you’d  have  a  router  in  your  garage  for 
downloading  media  or  content." 

And  some  day  dealers  might  use  Wi-Fi  to 
siphon  diagnostics  information  out  of  cars. 

But  use  of  Wi-Fi  for  Internet  access  while 


cars  are  in  motion  is  still  just  a  pipe  dream 
today  You’d  need  to  have  Wi-Fi  hot  spots 
along  the  highwayYagley  says. That  won’t 
happen  anytime  soon. 

Keeping  drivers,  passengers  safe 

Of  course  the  wireless  communications 
links  aren’t  just  for  fun.  Carmakers  look  to 
the  technologies  to  support  information 
services  for  areas  such  as  safety,  mainte¬ 
nance  and  navigation. 

At  the  forefront  is  General  Motor’s  OnStar 
service,  which  provides  two-way  voice  and 
data  communications  to  vehicles  to  han¬ 
dle  requests  for  roadside  assistance, 
remote  diagnostics  and  driving  directions. 
OnStar  can,  for  example,  unlock  doors, 
track  stolen  cars,  check  a  car’s  engine  and 
even  detect  if  an  airbag  has  been 
deployed  and  dispatch  emergency  teams. 

All  new  GM  vehicles  come  with  OnStar 
and  one  year  of  free  service.  A  rival  ser¬ 
vice  from  ATX  Technologies  is  available  in 
vehicles  from  Mercedes-Benz  and  BMW 
Similar  technologies  might  some  day 
make  it  possible  for  car  dealers  to  offer 
remote  monitoring  services  that  help  pre¬ 
empt  breakdowns.Today  services  such  as 
NetworkCar  are  available  for  managers  of 
car  fleets,  which  lets  them  run  regular 
diagnostic  tests,  monitor  miles  per  gallon, 
check  odometers  to  schedule  preventive 
maintenance  and  even  identify  cars  that 
haven’t  been  used  much. 

“Where  the  future  is  headed  is  safety-ori¬ 
ented  diagnostics,”  Bogden  says.“We  could 
end  up  offering  remote  diagnostics,  where 
OnStar  could  prompt  you  to  run  certain 
diagnostics  on  the  vehicle  or  tell  you  what 
to  do  if  you’re  getting  trouble  codes.lt 
could  tell  you  to  pull  the  car  over  even  if 
you  don’t  see  anything  wrong  with  it.” 

Increasingly,  GM  expects  to  link  OnStar 
to  a  car’s  internal  control  systems.  OnStar’s 
navigational  system  might  tell  the  car  it 
will  soon  head  up  a  hill  or  around  a  cor¬ 
ner,  in  which  case  the  car’s  control  system 
might  automatically  shift  the  transmission. 

“In  the  future,  we’ll  be  bringing  informa¬ 
tion  from  the  outside  world  into  the  carf 
Bogden  says.“Today,  a  car’s  navigational 
system  can  tell  if  it’s  sitting  in  traffic  and  it 
can  try  to  adjust  the  idle  speed  of  the 
engine  to  help  the  fuel  economy  It’s  not  a 
big  deal,  but  it’s  a  first  test  of  how  we  can 
start  using  some  of  this  [external]  infor¬ 
mation  inside  the  car’’ 

The  communications  systems  behind 
information  services  like  OnStar  are 
migrating  from  analog  to  digital  in  con¬ 
junction  with  a  similar  migration  going  on 
in  the  cellular  industry 
“Analog  networks  will  be  phased  out  by 
2008,”Viquez  says.“OnStar  started  migrat¬ 
ing  their  hardware  late  last  year  to  be 
both  analog  and  digital  capable.  We’re  fig¬ 
uring  that,  by  this  time  next  year,  they’ll 
have  an  all-digital  strategy 
The  OnStar  and  ATX  systems  show  the 
promise  of  telematics,  two-way  data  com¬ 
munications  systems  being  developed 
for  applications  such  as  traffic  manage¬ 
ment.  With  these  systems,  cars  would 

See  gars,  page  74 
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I  convinced  my  boss  to  get 
this  big  honkin’  collaboration 
infrastructure  only  a  genius 
like  me  could  ever  use. 
Check  it  out  on  my  blog 
at  www.frankwillis.com 

-  Frank  Willis 


IPSWITCH* 


Collaboration  Suite 


Ipswitch  Collaboration  Suite,  the  solution  for  small 
and  mid-sized  business  collaboration  that  just  works. 

Use  Microsoft® Outlook®  or  your  browser  to  connect 
to  a  powerful  industry-leading  messaging  server.  Communicate  in  real  time  with  anyone 
in  your  company  using  secure  instant  messaging.  Streamline  group  collaboration  with 
shared  calendars  and  free-busy  meeting  scheduling.  Reduce  junk  e-mail  and  stop 
viruses.  All  this,  and  Ipswitch  Collaboration  Suite  is  easy  to  install,  manage  and  use. 
Play  it  “safe”  like  Frank.  Or  be  smart.  Go  to  www.ipswitch.com  and  find  success 
with  Ipswitch  Collaboration  Suite. 


Smart 


■  Proven 


Reliable 


60  million 

mailboxes  worldwide 
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www.ipswitch.com  or  call  800-793-  182  5 


©2005  Ipswitch,  Inc.  All  product  names  are  the  property  of  their  respective  owners. 


YOUR  JOB  IS  TO  KEEP  SYSTEMS  AND  APPLICATIONS  RUNNING. 
OUR  MISSION  IS  TO  KEEP  PEOPLE  AND  INFORMATION  CONNECTED. 

LET’S  WORK  TOGETHER. 


Continuous  access  to  information  no  matter  what.  That’s  Information 
Availability.  It’s  what  your  employees,  suppliers  and  customers  demand  every 
minute  of  every  day.  But  to  deliver  it  flawlessly,  you  need  a  massive  global 
infrastructure,  redundant  systems  and  diverse  networks  being  monitored  and 
supported  by  skilled  technical  experts  at  secure  facilities.  That’s  exactly  what 
SunGard  provides. 


For  years,  companies  around  the  world  have  turned  to  SunGard  to  restore  their 


systems  when  something  went  wrong.  So,  it’s  not  surprising  that  they’re  now 


turning  to  us  to  mitigate  risk  and  make  sure  they  never  go  down  in  the  first  place. 


You  want  your  network  and  systems  to  always  be  up  and  running.  We  want  the 
same  thing.  Let's  get  together.  To  learn  more,  visit  www.availability.sungard.com  or 
call  1-800-468-7483, 


As  a  result,  we  can  offer  you  a  higher  level  of  availability  and  save  your 
company,  on  average,  25%*  versus  building  the  infrastructure  yourself.  Plus, 
it’s  a  vendor  neutral  solution  that  lets  you  control  your  data,  applications  and 
network  while  giving  you  the  flexibility  to  adjust  to  the  changing  needs  of  your 
business.  But  best  of  all,  it  lets  you  spend  more  time  solving  business  problems 
and  less  time  solving  technical  problems. 


SUNGARD 

Availability  Services 


'Potential  savings  based  on  IDE  White  Paper,  Ensuring  Information  Availability:  Aligning  Customer  Needs  with  an  Optimal  Investment  Strategy. 
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Cars 

continued  from  page  72 

have  sensors  that  communicate  with 
roadside  sensors  for  sharing  information 
such  as  traffic  reports. 

Telematics  systems  require  massive  infra¬ 


structures  to  be  built,  and  it’s  not  clear 
what  the  economics  are  for  building  that 
out.  For  traffic  management  applications, 
a  government  agency  would  need  to 
install  sensors  on  roads  that  track  traffic 
patterns  and  communicate  with  cars  to 
re-route  vehicles. 


Even  further  out  is  car-to-car  communi¬ 
cations,  through  which  sensors  on  one  car 
could  relay  messages  to  sensors  on  anoth¬ 
er  car  about  traffic.  It’s  conceivable  that 
cars  could  automatically  adjust  speed  and 
direction  to  prevent  accidents  based  on 
information  they  receive  from  each  other. 


“The  future  is  not  car-to-roadside  com¬ 
munications,  but  car-to-car  communica¬ 
tions.  If  you  think  of  each  car  as  a  network 
probe,  the  car  knows  how  fast  it’s  going 
and  where  it  is,”  Hansen  says.“In  an  anti¬ 
collision  application,  a  car  that  slows 
down  to  zero  could  transmit  that  informa¬ 
tion  backwards  to  vehicles  coming  up 
behind  so  they  can  slow  down,  too.” 

Another  mobile  device 

With  all  of  these  new  communications 
technologies,  automobiles  are  likely  to  be¬ 
come  just  another  mobile  device,  albeit 
more  mobile  than  most. 

“Fifty  million  vehicles  are  manufactured, 
and  those  ‘devices’  desire  to  be  connect¬ 
ed  to  the  network  for  a  variety  of  reasons,” 
Colson  says.“With  OnStar.you  see  the  abil¬ 
ity  to  have  a  call  center  provide  a  vehicle 
with  additional  data  center  support.You’ll 
see  more  and  more  of  that.” 

Other  advances  that  Colson  sees  are 
the  use  of  natural  language  communica¬ 
tions  between  the  driver  and  the  car, 
advanced  diagnostics  capabilities,  real¬ 
time  traffic  and  navigational  informa¬ 
tion  available  from  multiple  sources, 
and  new  types  of  displays  that  require 
more  powerful  processors. 

“We’re  doing  some  of  the  same  things  in 
cars  that  we  do  on  desktops,”  Colson  says. 

As  exciting  as  these  developments  are, 
they  come  at  a  cost.“The  downside  to 
all  the  networking  in  the  vehicle  is  the 
rising  complexity  of  the  electronics,” 
Hansen  says. 

“If  you  take  the  control  systems  that 
are  operating  independently  and  con¬ 
nect  them, you  have  an  exponentially 
greater  chance  of  reliability  problems  as 
they  interact  with  each  other.  That’s  the 
rub.  Electronic  complexity  and  quality 
do  not  correlate  well,”  Hansen  adds.  ■ 


Automotive  standards 

Car  makers  are  converging 
around  several  standards  for 
infernal  control  networks. 

LIN  —  Local  Interconnect  Network,  a 
low-speed  network  used  in  applica¬ 
tions  such  as  turning  on  lights  and  fans 
or  locking  doors, 

CAN  —  Controller-Area  Network,  a 
shared  data  communications  link  used 
for  high-speed,  real-time  applications 
such  as  controlling  the  car’s  engine  or 
the  transmission. 


Safebywire  —  For  the  delivery  of 
critical  messages  such  as  the  release 
of  airbags  during  a  collision. 

FlexRay  —  FlexRay  is  an  ultra  high¬ 
speed  link  being  developed  for  systems 
that  need  to  interact,  such  as  having 
the  anti-lock  braking  systems 
communicate  with  the  engine  so  they 
work  together  to  slow  the  car. 

MOST  —  Media  Oriented  System 
Transfer,  a  fiber-optic  network 
optimized  for  automotive  applications. 
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Enterprise  Applications  Soar 
for  Cathay  Pacific  Airways 


Without  Akamai,  there  is  no  way 
that  a  100%  increase  in  online 
bookings  would  have  occurred. " 

V  Cathay  Pacific 
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Akamai  delivers  more  than  content.  We  deliver  improved  performance  of  Cathay  Pacific's  dynamic 
online  applications,  allowing  passengers  and  agents  to  book  travel  and  check-in  for  reservations 
online  with  ease.  We  deliver  hundreds  of  thousands  of  dollars  in  infrastructure  cost-savings,  enabling 
Cathay  Pacific  to  handle  increased  application  usage  without  investing  in  hardware.  Akamai  delivers 
.  customer  loyalty,  the  ability  to  handle  traffic  spikes,  and  the  flexibility  for  future  growth. 


'jHnff”vnii  driving  application  adoption  online.  Get  our  Enterprise 
Applications:  10  Tips  to  Increase  User  Adoption  and  Productivity  and  learn 
how  Cathay  Pacific  saves  over  SI, 000, 000  annually  in  our  case  study. 


'Call  888-340-4252  or  visit  www.akamai.com/enterpriseapplications. 
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SuperX  io-GE  Switch  Family 

A  Unified  Architecture  for  Enterprise  and  Service  Provider  LAN  and  Metro  Infrastructures 


Wf  ith  the  performance  you  expect  from  Foundry— now  comes  the  price,  flexibility,  and  density  breakthrough  you’ve  been  waiting  for.  The  new 
SuperX  family  of  Layer  2/3  modular  switches  provides  the  industry’s  highest  Gigabit  Ethernet  and  10-GE  density  per  rack  and  the  lowest  10- 
GE  price  per  port  in  a  modular  switch.  The  SuperX  family  delivers  an  extensive  feature  set,  standards-based  Power-over-Ethernet,  support  for  full 
Layer  3  (including  OSPF  and  BGP4),  and  wire-speed  10-GE  solutions.  From  the  enterprise  to  the  service  provider  environment:  SuperX  is  the  right  choice! 


FastIron  SuperX 

•  EDGE  &  WIRING  CLOSET  SWITCH 

•  EXTENSIVE  QOS  AND 
SECURITY  FEATURES 

•  EASE  OF  UPGRADE  TO  POE 


TURBOlRON  SUPERX 

•  IO-GE  AGGREGATION  AND  CORE  S 

•  PRE-CONFIGURED  WITH  16  IO-GE 
PORTS  PER  SWITCH 

•  INDUSTRY  LEADING  PRICE  OF 
LESS  THAN  $2,500/1  O-GE  PORT 


BlGlRON  SUPERX 

H  •  ENTERPRISE  AND  METRO  L3 

BACKBONE  SWITCH 

•  HIGH-PERFORMANCE  LAYER  3 
ROUTING  PROCESSOR 

•  UP  TO  1  MILLION  ROUTES  AND 
200+  BGP  PEERS 


High  density 

•  Up  to  204  Ports  GE-SFP  Mini-GBIC 

•  Up  to  204  Ports  10/100/1000 

•  Up  to  192  Ports  10/100/1000  PoE 

•  Up  to  16  Ports  10-GE 

HIGH  PERFORMANCE 

•  Wire-Speed  Every  Port 

•  Up  to  304  Mpps  Throughput 

•  510-Gbps  Switching  Capacity 

CONVERGENCE  READY 

•  Standards-Based  Power-over-Ethernet 

•  Purpose-Built  for  Data,  Voice  &  Video 

•  Integrated  Wired  &  Wireless  Support 

IRONSHIELD  SECURITY 

•  Wire-Speed  ACLs  &  Rate  Limiting 

•  Secure  Shell,  Secure  Copy,  SNMPv3 

•  DoS  Attack  Protection 

•  802. lx  &  MAC  Authentication 
with  Dynamic  Policy 
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FOUNDRY 

NETWORKS 

The  Power  of  Performance  ™ 


FOR  MORE  INFORMATION  PLEASE  CALL: 

US/CANADA  1  BBS  TURBOLAN, 

INTERNATIONAL  +1  4 □  B .  5  B  6 .  1  7  □  □ 

OR  VISIT  DUR  WEBSITE  AT  WWW.FDUNDRYNET.CDM/SX 

Foundry  Networks,  Inc.  is  a  leading  provider  of  high-performance  Enterprise  and  Service  Provider  switching,  routing  and 
Web  traffic  management  solutions  including  Layer  2/3  LAN  switches.  Layer  3  Backbone  switches,  Layer  4-7  Web  switches, 
wireless  LAN  and  access  points,  access  routers  and  Metro  routers. 
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NAS  box 


Buffalo  sets  the  bar  with  IT  byte  for  $1 ,000 


■  BY  JAMES  GASKIN,  NETWORK  WORLD  LAB  ALLIANCE 

In  25  years,  desktop  storage  has  jumped  from  the  IBM  PC  with  a  360K-byte 
floppy  drive  to  Buffalo  Technology’s  TeraStation,  which  offers  IT  byte  of  capac¬ 
ity  We  can  make  a  good  case  for  small  businesses,  workgroups  at  larger  busi¬ 
nesses,  and  even  upscale  home  networks  (digital  video  fans  gobble  gigabytes 
like  candy)  to  plop  down  $1,000  for  a  terabyte  of  disk  storage. 


While  Buffalo  says  the  TeraStation  com¬ 
bines  ease  of  use  with  enterprise-class 
features,  we  were  a  bit  skeptical. True,  the 
installation  of  the  network-attached  stor¬ 
age  (NAS)  box  was  quick  and  easy  and 
you  can  apply  the  enterprise  label  be¬ 
cause  of  the  terabyte  capacity  But  any 
enterprise-class  storage  device  should 
include  more  management  tools,  direc¬ 
tory  integration  and  hot-swappable  disk 
drives,  all  lacking  in  the  TeraStation. 

Installation  included  automatically 
finding  an  open  IP  address  upon  booting 
(once  we  gave  the  administrator  pass¬ 
word  to  enable  client  DHCP  settings)  and 
making  an  easy  connection  from  a 
Windows  client  running  the  manage¬ 
ment  utility  from  an  enclosed  CD.  Tera¬ 
Station  only  supports  Linux  connections 
via  Server  Message  Block  Windows  net¬ 
working,  but  our  Xandros  3.0  Linux  Desk¬ 
top  had  no  problem  accessing  the  unit 
that  way.  Default  settings  include  en¬ 
abling  AppleShare  but  not  FTP  (having 
anonymous  FTP  access  on  by  default 


M  Results 


OVERALL  RATING 


Company:  Buffalo  Technology, 
www.buffalotech.com  Cost:  $999  for  IT 
byte;  $1,999  for  1.6T  bytes;  $799  for  0.6T 
bytes  (600G  bytes).  Pros:  Small,  sleek, 
quiet;  huge  storage  space;  excellent  NAS 
value  for  RAID  storage.  Cons:  Poor  client 
back-up  software;  no  native  Linux  support 
(SMB  access  only);  USB-attached  drives 
didn't  work. 


The  breakdown 


Management  25% 


Capacity/value  25% 


Backup  15% 


Installation  15% 


Documentation  10% 


Features  10% 


TOTAL  SCORE 


4.1 


Scoring  Key:  5:  Exceptional:  4:  Very  good;  3: 
...  Average;  2:  Belowaverage:  1:  Consistently 
>  /  subpar  '  ' 


isn’t  secure),  and  the  four  Western  Digital 
243G-byte  disk  drives  are  set  to  spanning 
mode,  pooling  all  the  disk  space  into  one 
huge  volume. 

You  can  run  the  system  in  Standard 
Mode,  where  each  disk  becomes  a  sepa¬ 
rate  volume;  Mirroring  Mode,  where  pairs 
of  disks  match  up  in  a  RAID-1  mirror  con¬ 
figuration,  which  gives  you  two  fault- 
tolerant  500M-byte  volumes;  or  RAID-5 
mode,  which  cuts  the  disk  space  by  25%, 
to  750G  bytes,  but  increases  performance 
and  fault  tolerance  to  survive  a  failure  of 
any  one  disk.  A  journaling  file  system  also 
improves  reliability  mounting  speed  and 
failure  recovery  These  are  high-end  stor¬ 
age  features,  and  if  the  drives  were  hot- 
swappable  we  wouldn’t  argue  about  the 
enterprise  label. 

Although  usable  space  only  showed 
928G  bytes  after  installation,  the  Tera¬ 
Station  still  had  more  capacity  to  fill  than 
our  lab  could  cram  onto  it.  Performance 
matched  the  lower-end  NAS  products 
we’ve  tried  because  the  four  drives  are 
Integrated  Drive  Electronics  (IDE)  rather 
than  SCSI,  spin  at  7,200  rpm,  and  have 
only  a  2M-byte  buffer.  As  the  price  of 
Serial  ATA  drives  drop,  Buffalo  could  im¬ 
prove  performance  by  upgrading  its  Ultra 
ATA/ 100  drives  to  SATA  and  leveraging 
the  8M-byte  buffers  standard  with  drives 
using  that  interface.  The  lone  Ethernet 
port  on  the  TeraStation  auto-senses  be¬ 
tween  10M-,  lOOM-and  lG-bit  speeds,  and 
supports  Jumbo  Frames.  Again,  this  was 
an  interesting  mix  of  high-  and  low-end 
features. 

A  client-based  management  utility 
shows  status  and  lets  you  change  the  IP 
address  of  a  TeraStation,  but  is  really  use¬ 
ful  only  to  launch  the  browser-based  ad¬ 
ministration  utility  The  Web  utility  does 
all  the  heavy  lifting,  including  setup,  net¬ 
work  configuration,  disk  maintenance, 
user  and  group  management,  print  server 
management  and  status  screens.  The 
TeraStation  can  respond  to  smart  UPS 
shutdown  commands,  and  also  can 
e-mail  up  to  five  addresses  with  a  limited 
number  of  status  messages  (such  as  an 
OK  message  every  24  hours, system  back¬ 
up  completion  and  emergencies).  User 
and  group  management  options  strictly 


follow  Windows  workgroup  or  domain 
network  rules,  limiting  their  effectiveness 
in  larger  installations  that  rely  on  Micro¬ 
soft’s  Active  Directory  or  any  other  direc¬ 
tory  service,  but  allowing  enough  control 
for  small  businesses  and  workgroups. 

Client  back-up  support  is  critical  for 
small  to  midsize  businesses  and  home 
users  Buffalo  targets,  yet  TeraStation  only 
meets  these  needs  halfway  The  supplied 
back-up  utility  lacks  the  ability  to  per¬ 
form  incremental  backups,  storing  full 
back-up  sets  each  iteration  rather  than 
copying  changed  files  since  the  last  full 
backup.  Restoration  works  only  at  the 
folder  level,  so  restoring  one  file  means 
restoring  all  the  files  in  the  directory, 
unless  you  restore  to  a  new  location  and 
manually  pick  out  a  file. You  can  manu¬ 
ally  drill  down  the  back-up  file  structure 
and  drag  a  file,  but  both  options  are  far 
behind  better  back-up  software.  Buffalo 
just  made  a  deal  with  Tanagra  (wwwnet 
workworld.com,  DocFinder:  7030)  to  in¬ 
clude  its  Memeo  back-up  software  in  the 
second  quarter,  but  it’s  only  a  30-day  trial 
(about  $30  to  purchase). 

Backing  up  the  TeraStation  includes 
more  options  and  controls  than  the 
client  back-up  utility,  especially  to  a  sec¬ 
ond  TeraStation  or  attached  USB  hard 
drive.  Incremental  TeraStation  backups 
are  supported,  as  well  as  compressed 
and  encrypted  transmissions  over  a  net¬ 
work.  USB-connected  drives  also  can  be 
used  for  backup,  giving  some  level  of  off¬ 
site  storage  option  when  using  a  portable 
drive.  One  annoyance  is  that  the  over-the- 
network  backup  only  works  to  another 
TeraStation  unit. 

Second,  the  USB-attached  drives  never 
communicated  properly  with  the  Tera¬ 
Station  (we  tried  two  different  drives,  one 
from  Iomega  and  another  from  Olixir)  so 
we  couldn’t  try  the  USB  backup.  Buffalo’s 
free  technical  support  couldn’t  explain 
the  problem.  But  we  did  test  one  of  the 
first  three  TeraStations  in  the  US.,  so  this 
could  just  be  a  rough  edge  that  will  get 
smoothed  over.  Nevertheless,  Buffalo 
deserves  kudos  for  free  technical  support 
and  a  free  phone  call. 

The  TeraStation  fills  the  nearenterprise 
gap  quite  well,  giving  enterprise-like  stor- 


The  TeraStation  should  include  more  man¬ 
agement  tools,  directory  integration  and 
hot-swappable  drives. 

age  space  at  small-business  prices,  but  at 
the  expense  of  some  enterprise  controls. 
That  said,  the  sight  of  a  sleek  silver  case 
on  a  server  rack  or  bookshelf  holding  a 
terabyte  of  disk  space  (or  1.6T  bytes  in 
the  largest  size)  still  amazes  us.  Con¬ 
figuring  this  unit  as  RAID-5  for  the  highest 
performance  and  fault  tolerance  costs 
only  $1.25  per  gigabyte  (750G  bytes 
total). This  level  of  storage  space,  reliabil¬ 
ity  and  performance  has  never  been  so 
affordable  for  small  businesses  or  the 
home  entertainment  fanatic  who  has 
everything  digital  and  now  has  the  disk 
space  for  it  all. 

Gaskin  is  an  author  of  books  and  stories 
about  technology  in  Daiias.  He  can  be 
reached  at  readers@gaskin.com. 
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YOUR  INFRASTRUCTURE  MAY  PROTECT  EMPLOYEES  INSIDE. 

What  protects  employees  outside? 


She  works  from  home.  She  works  from  the  road.  And  she  endangers 
the  network  everywhere  she  goes.  That's  why  you  need  Websense 
software — to  provide  security  protection  at  the  desktop  and  beyond. 
Close  the  security  gap.  Download  your  free  evaluation  today 
www.websense.com/mobile5 


SECURING  PRODUCTIVITY™ 


©  2005  Websense.  Inc.  All  rights  reserved.  Websense  is  a  registered  trademark  of  Websense.  Inc.  in  the  United  States  and  certain  international  markets. 


1 0  troubleshooting  tools 

Network  managers  share  the  essentials  any  data  center  shouldn't  be  without 


■  BY  DENI  CONNOR 

Everyone  who  backpacks  can  rattle  off  the  10  essentials  by  rote  — 
map,  compass,  flashlight,  extra  food  and  clothes,  sunglasses,  first-aid 
kit,  knife,  waterproof  matches,  fire-starter.  They  are  essential  tools 
anyone  who  hikes  needs  as  insurance  against  the  unexpected. 

A  network  manager  is  often  stretched  in  many  directions  by  department  heads  who 
try  to  use  their  clout  to  get  their  applications  pushed  to  the  top  of  the  heap. 

Likewise,  network  managers  rely  on  must-have  troubleshooting  tools  for  diagnosing 
problems  with  their  networks, servers  and  desktop  PCs.  What  follows  are  the  10  tools  net¬ 
work  managers  deem  essential  to  their  network  management  arsenals. 

1.  Configuration  inventory*  An  inventory  of  the  configuration  of  workstations  and 
servers  on  a  network  is  instrumental  in  being  able  to  root  out  the  source  of  trouble, 
according  to  Mark  Moroses,  senior  director  of  technical  services  and  security  officer  at 
Maimonides  Medical  Center  in  NewYork.This  can  be  on  paper,  but  it  cannot  become 
suspect  —  the  data  has  to  be  maintained  and  trusted,”  he  says.“It  is  priceless  to  know 
the  exact  configuration  of  equipment  inside  the  problem  domain.” 

Moroses  uses  Bindview’s  NETinventory  Another  popular  option  is  Tally  Systems’  TS 
Census,  which  Novell  recently  acquired  and  added  to  its  ZENworks  Asset  Management. 

2.  Network  diagramming  software.  “You  cannot  troubleshoot  a  network  issue  without 
an  accurate,  complete  understanding  of  the  equipment  involved,  and  for  that  you  must 
be  sure  of  the  communication  path,”  Moroses  says. 

Network  diagramming  software  is  key  to  establishing  the  critical  links  between  network 
gear.  Microsoft’s  Visio  2003  is  the  market  leader  for  diagramming  the  physical  configuration 
of  a  network. 

3.  A  device-polling  system.  Software  that  automatically  polls  network  devices  —  servers, 
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switches,  printers  and  routers  —  to  see  if  they  are  connected  also  is  important. When  a 
device  doesn’t  respond  to  a  poll,  it  is  usually  the  first  signal  of  trouble. 

“Boiling  is  an  accurate, clear  method  for  assessing  the  scope  of  the  problem, "Moroses  says. 
“For  example,  multiple  devices  in  multiple  locations  may  be  affected  at  the  same  time.” 

Moroses  says  relying  on  users  to  complain  that  a  printer  isn’t  working  or  that  they  can’t 
connect  to  the  network  is  usually  misleading  and  results  in  IT  staff  taking  longer  to  diag¬ 
nose  a  problem.  While  SNMP  traps  can  be  useful, simple  ping  polling  is  worth  its  weight 
in  gold,  Moroses  says. 

Many  devices  such  as  Cisco  routers  and  switches  also  ship  with  a  device-polling  config¬ 
uration  option.  Fidelia’s  NetVigil  also  provides  for  polling  of  any  SNMP-enabled  device. 

4.  Application  logs.  Each  application  provides  a  log  file  of  error  codes.  At  Maimon¬ 
ides,  Moroses  says  by  reviewing  the  logs  early  in  the  troubleshooting  process  he  can 
reduce  the  size  of  the  fault  domain.  He  says  application  logs  are  especially  effective 
when  used  in  combination  with  network  device  logs. 

5.  Network  device  logs.  Reviewing  network  device  logs  for  switches,  routers  and  other 
network  gear  also  can  help  define  and  diagnose  a  problem  quickly.  When  a  network 
manager  configures  a  system  so  that  all  logs  are  sent  to  a  central  source  —  a  syslog  on 
the  server  —  they  can  be  particularly  helpful.  A  freely  downloadable  syslog  server  is 
available  from  Kiwi  Enterprises  at  www.kiwisyslog.com. 

6.  Microsoft  Excel.  Some  tools  such  as  Excel  come  already  installed  in  a  network 
manager’s  kit.  Using  Excel  to  compare  log  entries  for  multiple  network  devices  can 
help  IT  managers  identify  patterns.  Because  most  logs  are  time-stamped,  Excel  spread¬ 
sheets  represent  a  good  way  to  see  “an  entire  forensic  picture,”  Moroses  says.  Users  in 
open  source  environments  might  be  interested  in  the  OpenOffice  Calc  spreadsheet. 

7.  Remote  control  software.  For  any  organization  spread  over  a  wide  geographic 
area,  a  remote  control  tool  is  extremely  useful  in  checking  theories,  or  patching  or 
reconfiguring  remote  devices  or  workstations.  Popular  tools  include  Symantec’s  PC- 
Anywhere,  Funk  Software’s  Proxy, VNC  (Virtual  Network  Computing)  and  CrossTec’s 
NetOp  Remote  Control. 

Shane  Wilson,  coordinator  of  network  services  for  Centre  College  in  Danville,  Ky ,  uses 
the  open  source  tool  Putty  to  remotely  access  servers  and  devices. 

8.  A  protocol  analyzer  or  cable  tester.  For  complicated  connectivity  issues,  a  hard¬ 
ware-  or  software-based  protocol  analyzer  is  essential. There  are  some  issues  that  can¬ 
not  be  diagnosed  without  packet-level  inspection. 

Fmisar’s  XGig  Analyzer  Suite,  the  Ethereal  protocol  analyzer  and  Fluke’s  OptiView  Pro¬ 
tocol  Expert  are  popular  choices. Tripplet  Fox  &  Hound  wire-tracing  kit  also  can  be  used 
to  troubleshoot  wiring  problems. 

Wilson,  who  uses  cable  testers  from  Fluke  or  Microtest, says, “You  need  to  be  able  to  rule 
out  physical-layer  problems.”  He  also  uses  Ethereal’s  freely  downloadable  open  source 
protocol  analyzer.“Sometimes  you  just  have  to  get  down  and  see  what  data  is  being  passed 
back  and  forth  on  your  network  to  solve  a  networking  issue,”  he  says. 

9.  The  Internet.  Another  tool  of  daily  use  —  the  internet  —  can  be  invaluable  for 
researching  complicated  problems  or  device  configurations,  or  finding  patches, 
Moroses  says.  HP’s  site  has  a  wealth  of  patches  available,  and  Novell’s  NetWare  and 
other  forums  offer  a  fair  degree  of  accurate  advice. 

Wilson  says  the  Internet  also  provides  a  plethora  of  information.'The  ability  to  get 
help,  download  drivers  and  find  documentation  on  the  Internet  make  all  of  the  differ¬ 
ence,”  Wilson  says.“I  don’t  know  how  I  would  do  my  job  without  all  of  the  information¬ 
al  resources  of  the  ’Net.” 

10.  Imaging  software.  At  Maimonides,  Moroses  uses  Symantec’s  Norton  Ghost  to 
reconfigure  and  reprovision  workstations.“The  issue  is  being  able  to  reload  any  device 
to  a  known  good  copy,  virus  free,”  Moroses  says.“Not  only  is  it  nice  for  building  a  new 
machine,  but  by  making  it  a  10-minute  process  it  can  also  be  used  to  take  possible  the¬ 
ories  ‘off  the  table’  by  making  sure  the  live  configuration  is  valid.” 

Among  other  imaging  software  are  Altiris’  Client  Management  Suite  and  Microsoft’s 
Remote  Installation  Services.  ■ 
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Mr.  50,000  Global 
Remote  and  Mobile 
Users  Connected 
Without  a  VPN. 
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Make  a  name  for  yourself  with  Windows  Server  System.  An  upgrade  to  Microsoft*  Windows  Server  System™ 
made  it  possible  for  50,000  worldwide  employees  at  Nissan  Motor  Company  to  have  more  secure 
remote  access  to  their  e-mail  and  calendars  from  any  Internet  connection,  without  the  hassle  and 
expense  of  a  VPN.  Here's  how:  By  deploying  Windows  Server™  2003  and  Exchange  2003,  not  only  did 
Nissan  IT  meet  the  CEO's  demand  for  better  global  collaboration,  they  expect  to  save  at  least  $135 
million  by  streamlining  their  messaging  infrastructure.  To  get  the  full  Nissan  story  or  find  a  Microsoft 
Certified  Partner,  go  to  microsoft.com/wssystem 


Windows 
Server  System 


Aluminum  Cabinets  provide  protection  against  dust,  moisture,  and  EMI 


The  new  Form  4  range  of  rugged  aluminum  cabinets 
from  Optima  EPS  has  been  designed  to  provide  reliable 
protection  to  UL-508Type  12  specifications,  as  well  as 
offering  options  for  up  to  1 0OdB  of  EMI  attenuation. 

The  cabinets  are  easily  customized  to  suit  the  required 
height,  depth,  and  width,  including  19"  and  24"  widths 

The  combination  of  Nema  12  protection  and  RFI  shield¬ 
ing  in  a  low  weight  cabinet  makes  the  Form  4  cabinet 
suitable  for  a  wide  range  of  applications,  such  as 
computer  simulation,  test  and  measurement,  industrial 
control,  and  computer  storage  installation.  For  maxi¬ 
mum  flexibility,  the  reinforced  doors  are  field-reversible 
and  open  1 22  degrees  for  access,  with  concealed  hinges 
and  multipoint  locking  for  security  and  clean  lines. 


We  deliver  customized  19-inch 
cabinets  in  just  2  weeks 


Every  electronic  system  is  different,  so 
its  not  surprising  that  standard  1 9-inch 
cabinets  don't  always  offer  the  idea! 
system  packaging.  That's  why  Optima 
has  introduced  the  Custom  Cabinet  14 
service:  customized  cabinets  delivered 
to  your  door  in  just  1 4  days. 


You  decide  where  you  want  the  holes 
and  handles.  How  many  shelves  you  need.  Where  the  doors  should  be.  And  what 
accessories  you  want.  Then  we  put  it  together  -  fast. 


So,  with  the  Optima  EPS  Custom  Cabinet  1 4  service,  you  don't  have  to  keep  space 
hungry,  expensive  inventory,  because  your  ideal  cabinet  is  just  2  weeks  away. 


Wall-mount 
swing  frame 
suits  both 
electrical 
wiring  and 
19"  electronic 
equipment 

applications. 

Optima  EPS 
announces 
the  launch  of 
a  versatile  range  of  wall-mount  swing  frame 
cabinets,  designed  to  suit  both  electrical  wir¬ 
ing  and  electronics  applications.  Locks  to  the 
rugged  front  and  rear  doors  permit  the  whole 
frame  to  clear  the  wall  to  simplify  installation 
and  maintenance  for  electrical  contractors  and 
manufacturing,  instrumentation,  and  automa¬ 
tion  applications.  The  Frame  is  designed  to 
accept  standard  1 9"  racks  and  fittings,  as  well 
as  electrical  components,  and  is  available  in  a 
range  of  colors  and  six  standard  sizes  from  23" 
x  14"  to  48"  x  20". 


This  range  of  19"  and  24"  wide  cabinets  use 
welded  aluminum  construction  to  provide 
lower  weight  NEBS  compliance  for  seismic 
regions.  Heavy-duty-aluminum  extrusions 
are  combined  with  seven-guage  steel  base  to 
provide  a  rugged  floor-mounting  design  able 
to  resist  shock,  bending  and  vibration  stresses. 
The  cabinets  are  designed  for  deployment  in 
earthquake-prone  areas  to  Zone  4,  and  comply 
with  Be!coreTR-63/ANSI-329,  suiting  appli¬ 
cations  in  defence,  rack-mount  computers, 
manufacturing,  and  telecom. 


If  we  can  do  this  then  your  server  application 
is  safe  with  us! 


NEBS  Compliant  Seismic  Cabinet 

Optima's  rugged  design  is  the  earthquake  and  vibration  resilient 
foundation  you  need  to  securely  protect  and  support  your  equip¬ 
ment.  Our  knowledge  and  design  experience  has  enabled  us 
to  manufacture  over  5000  seismic  hardened  cabinets  which  are 
installed  in  Zone  4,  NEBS  Compliant  infrastructures  worldwide! 

Our  vast  product  range  and  our  ability  to  customize  cabinets, 
consoles,  and  instrument  cases  make  optima  the  ideal  choice  for 
all  your  enclosure  needs. 

Visit  us  at  www.optimaeps.com  to  find  out  more 
or  call  us  today  on  770-496-4000 


Custom 

Commercial 

Telecom 

Seismic 

EMC 

Desk  Systems 
Instrument  Cases 
Accessories 


Optima  EPS 

Cabinets  &  Enclosures 

An  ELMA  Company 


JOIN  THE 

$300  BILLION 

COMPUTER  SERVICE  BUSINESS. 

Find  out  how  you  can  invest  in  one  of  Entrepreneur 
Magazine’s  “Fastest-Growing  Franchises”  #48  (2005), 
“Franchise  500®”  rank  #258  (2005),  and  “Top  New 
Franchises”  #15  (2005).  Single,  Multi-Units  and  Area 
Development  Opportunities  are  now  available. 


For  more  information  call 


or  visit  us  at: 


(ext.  309) 


geeksoncallfranchise.com 


www.networkworld.com 
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ASSET  MANAGEMENT 
IN  MINUTES, 

NOT  DAYS. 


NETSUPPORT 

ONAvi 


How  much  can  your  network  analyzer  see? 


Observer  is  the  only  fully  distributed  network  analyzer  built  to 
monitor  the  entire  network  (LAN,  802.1 1  a/b/g,  Gigabit,  WAN). 
Download  your  free  Observer  10  evaluation  today  and  experience 
more  comprehensive  real-time  statistics,  more  expert  events,  and 
more  in-depth  analysis  letting  you  dive  deeper  into  your  network 
than  ever  before.  Choose  Observer. 


-  DRflGER-  Guard  against  the  latest  network  threats  by  identifyini 
and  isolating  infected  systems  automatically. 


-  DRTR  Mini  nG-  Analyze  gigabit  traffic  and  massive  amounts 
of  data  with  Observer's  expanded  options  for  data  mining. 


-JUflK  TRRFFiC-  Identify  broadcast  storms,  monitor  excessive 
traffic,  and  optimize  bandwidth  with  Observer's  many  utilization 
metrics  and  over  30  real-time  statistics. 


US  &  Canada  toll  free  800.526.5958 
fax  952.932.9545 


UK  &  Europe  +44(0)1959569880 


The  problem  with  traditional  Asset  Management  solutions,  is  that  while  claiming  to  offer  accelerated 
levels  of  ROI  once  installed,  they  often  overlook  the  cost  of  implementation  in  the  first  place. 

Hours  turn  in  days,  days  into  weeks  and  weeks  into  months.  Before  long,  the  implementation  cost 
exceeds  the  initial  purchase  price  and  that's  before  you  consider  the  on-going  support. 

But  there  is  an  alternative.  One  which  offers  all  the  functionality  you'd  expect  from  an  award 
winning  asset  management  suite  but  with  only  a  30  minute  implementation  path. 

NetSupport  DNA  combines  powerful  powerful  Hardware  &  Software  Inventory  with  Software 
Distribution,  unique  Application  &  Internet  Metering,  best  of  breed  PC  Remote  Control,  Enterprise 
Reporting  and  an  optional  web  based  Helpdesk. 


S/W  Inventory 
S/W  Metering 
S/W  Distribution 
Internet  Metering 
Helpdesk 
Remote  Control 
Reporting 


Think  about  it,  but  not  for  long  as  the  clock’s  ticking  -  in  30  minutes,  you  could  be  gathering  vital 
asset  information  and  enterprise  reports  for  the  whole  of  your  network  (and  also  those  users  not 
connected  to  it). 


Visit  www.netsupport-inc.com  and  download  a  full  trial  license  today. 


Ne^tBupF^rt 

www.netsupport-inc.com 

Sales:  1-888-665-0808 


www.networkinstrumenfs.com/analyze 
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5  servers  and 
25  workstations 
just  $1499.99! 


For  details  visit 

www.  doriansoftware.  com/ 
expresspack 
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SERIOUS  EVERT  LOG  IHAHAGEMENT. 

WITHOUT  THE  BULL." 


Since  1997,  Dorian  Software  Creations  has  been  pioneering  event  log  management.  Now,  more  than  ever, 
security  professionals  are  looking  to  the  Dorian  Total  Event  Log  Management  Solution  to  meet  the  expanding 
demands  of  compliance  requirements  and  internal  security  and  auditing  standards. 

Dorian's  approach  addresses  each  step  in  the  life  cycle  of  log  data  and  provides  a  comprehensive  view  of 
your  network  health  and  security.  In  fact,  Dorian  has  never  focused  on  just  one  log  type,  because  as  you 
know,  threats  appear  in  many  forms.  Our  approach  provides  frontline  monitoring  of  the  event  log  and  syslog 
with  Event  Alarm™ ,  automates  the  collection  and  centralization  of  log  data  with  Event  Archiver™ ,  and 
provides  filtering  and  reporting  on  those  events  of  interest  with  Event  Analyst™ .  Finally,  Event  Rover™ 
provides  an  additional  level  of  convenience  for  on-the-fly  forensics  and  log  data  mining. 

Look  to  the  company  with  the  widest,  most  modular  suite  of  log  management  solutions.  Auditors  are 
expecting  perfection  from  you,  and  you  should  expect  the  best  in  scalability,  flexibility,  and  support  of  your  log 
management  software  strategy.  Avoid  mega-management  consoles  that  over  promise,  under  perform,  and 
wreak  havoc  on  IT  budgets  and  networks.  Look  to  Dorian  Software  Creations  for  total  event  log  management  - 
without  the  bull. 
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;  LOCAL  OR  REMOTE  SERVER  MANAGEMENT  SOLUTIONS 

JT 

UltraMatrix™ 

Remote 

■  MATRIX  KVM  SWITCH  WITH 

INTEGRATED  REMOTE  ACCESS  OVER  IP 

UltraMatrix™  ■ 

E-series 

PROFESSIONAL  MULTI-USER  KVM  SWITCH 

2  -  4  KVM  STATIONS  TO  1,000s  OF  COMPUTERS 

KVM  OVER  IP 

... 

....  . 

System-wide  connectivity  locally  or  over  IP  from  any  location 
worldwide 

•  Connects  1,000  computers  to  up  to  256  user  stations 

•  Supports  PC,  Sun,  Apple,  USB,  UNIX, 
ana  serial  devices 

•  High  quality  video  up  to  1280  x  1024 

•  Secure  encrypted  operation  with  login  and  computer  access  control 

•  Scaling,  scrolling,  and  auto-size  features 

•  View  real-time  4  computer  connections  using  the  quad-screen 
mode 

KVM  SWITCH  . 

• 

• 

PC  or  multi-platform  (  PC/Unix,  Sun,  Apple,  others) 
On-screen  menu  informs  you  of  connection  status 
between  units  in  an  expanded  system 

Powerful,  expandable,  low  cost 

No  need  to  power  down  most  servers  to  install 

Security  features  prevent  unauthorized  access 

Free  lifetime  upgrade  of  firmware 

Video  resolution  up  to  1600  x  1280 

Available  in  several  models 

Easy  to  expand 

The  UltraMatrix  Remote  represents  the  next  generation  in  KVM  switches.  It  not  only 
provides  a  comprehensive  solution  for  remote  server  console  access,  this  access  can 
be  local  or  from  any  workstation  on  your  network  over  IP. 

The  UltraMatrix  E-Series  represents  the  latest  in  KVM  matrix  switch  technolog,  at 
an  affordable  price.  The  E-Series  allows  you  to  connect  up  to  256  users  to  as 
many  as  1,000  computers.  The  UltraMatrix  E-Series  is  available  in  several  sizes: 
2x4,  2x8,  2x16,  4x4,  4x8,  4x16,  1x8,  and  1x16  and  either  PC  or  multi-  platform. 

■  KVM  RACK  DRAWER  WITH  KVM  SWITCH  OPTION 

The  RackView  offers  the  latest,  most  efficient  way  to  organize  and 
streamline  your  server  rooms  and  multiple  computers.  The 
RackView  is  a  rack  mountable  KVM  drawer  neatly  fitted  in  a 
compact  pull-out  drawer.  This  easy-glide  KVM  drawer  contains  a 
high-resolution  T FT/LCD  monitor,  a  tactile  keyboard,  and  a  high- 
resolution  touchpad  or  optical  mouse. 


RackView 

Fold-Forward 


RackView 

Fold-Back 


RackView 
LCD  Monitor 
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ROSE  US  +281  933  7673 

ROSE  EUROPE  +44  (0)  1264  850574 
ROSE  Asia  +65  6324  2322 
ROSE  Australia  +617  3388  1540 


800-333-9343 

WWW.ROSE.COM 


ELECTRONICS 


Sentry  Gives  You  Secure  Web/I P  Based  Remote  Site  Management 


"NEW!"  Secure  Shell  (SSHv2)  Encryption  « 
"NEW!"  SSLv3  Secure  Web  Browser « 
■  JEW!"  Active  Directory  with  LDAP  « 
SNMP  MIB  &  Traps  « 
I  ntec  ated  Secure  dem  « 

True  \S  Power  M  nitoring  « 
Outlet  Receptacle  Grouping  for  Dual-Power  Servers  « 
Fail-Safe  Transfer  Switch  for  Single-Power  Supply  Servers  « 
Power-up  Sequencing  Prevents  Power  In-rush  Overload  « 
Temperature  &  Humidity  Environmental  Monitoring  « 
Zero  U  &  Rack-mount  Models  « 
1 1 0/208  VAC  Models  with  30-Amp  Power  Distribution  « 
NEBS  Approved  -41  VDC  M  dels  Available  « 
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Solutions  for  the  Data  Center  Equipment  Cabinet 


When  servers  and  network  devices 
in  the  data  center  lock-up,  network 
managers  need  fast,  secure  and 
reliable  tools  to  respond.  With 
Sentry™  Remote  Site  Managers, 
an  administrator  can  immediately 
reboot  a  remote  system  with  just 
a  few  mouse  clicks.  Sentry  also 
provides  accurate  input  currant 
power  monitoring,  environmental 
monitoring  and  Integrated  secure 
console  management  using  SIR 


Server  Technology,  Inc* 
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TAP  into  Performance 

Monitor  mission-critical  links  with  the 
latest  technology  through  new  /iTAPs 

Stop  jeopardizing  network  performance  and  risking  costly  downtime.  Be  confident  you 
have  maximum  visibility  into  your  full-duplex  links  by  configuring  an  nTAP  solution  that 
fits  your  network  and  budget.  Visit  www.networkTAPs.com/visibility  today. 


Ethernet  Copper  nTAP 

For  copper-to-copper  connections 
Choose  your  speed: 

10/100 . $395 

10/100/1000 . $995 


10/100/1000  Conversion  nTAP 

Copper  input  with  copper  or 
fiber  output  options 
Choose  your  analysis  output: 

SX . $1,995 

LX . $1,995 


|  Optical  Fiber  nTAP 

Multiple  split  ratios 

Choose  your  port  density: 

Single  channel . 

. $395 

Four  channel . 

$1,795 

Six  channel . 

$2,395 

_ A 

To  learn  more  about  how  nTAPs  can  boost  your  network  visibility  and  which  configuration  option 
is  best  for  you,  go  to  www.networkTAPs.com/visibility  or  call  866-GET-nTAP  today. 

Free  overnight  delivery  * 


C€  •Free  overnight  delivery  on  all  U.S.orders  over  $300.00  confirmed  before  12  pm  CST. 

nTAP  and  the  nTAP  logo  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC 
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Good  things  come  in  small  packages. 


Our  small  Low  Profile  Server  Rack  Cabinets 
have  some  very  big  features:  •  Vented  top 
and  bottom  panels  •  Cable  plate  •  Welded 
vented  side  panels  with  handle  •  Adjustable 
rack  rails  •  Leveling 
feet  •  Optional  casters 
•  Vented  front  and  rear 
doors  for  better  airflow. 

Information  Support  Concepts,  inc 

714  N.  Watson  Rd  •  Ste.,  302  •  Arlington,  TX  76011 
Visit  www.iscdfw.com  or  call  1-800-458-6255  for  more  information. 

Solutions  for  IT  -  Network  -  Telecom  Professionals. 

©  2004  Information  Support  Concepts  Inc,  all  rights  reserved 
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Network  Power  Switches 


Control  Power  on  Any  AC 
Powered  Device ... 

Via  Web  Browser,  Telnet, 
Modem  or  Local  Terminal 


Servers,  routers,  and  other  electronic  equipment  occasionally 
“lock-up”,  often  requiring  a  service  call  to  a  remote  site  just  to 
flip  the  power  switch  to  perform  a  simple  reboot.  With  WTI’s 
Remote  Power  Switches,  you  can  perform  reboot  and  On/Off 
control  from  anywhere! 


© 

© 

© 

© 

© 

© 

© 
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Web  Browser  Access  for  Easy  Setup  and 
Operation 

Encrypted  Password  Security 

Dual  15  Amp  Power  Circuits 
Total  30  Amps  Maximum  Load 

115  VAC  and  230  VAC  Models 
Up  to  Sixteen  (1 6)  Individual  Outlets 
RS232  Modem  /  Console  Port 
Network  Security  Features 
Power-Up  Sequencing 

Web  Browser  Interface 
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Yes,  We  are  Customer  Friendly! 
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Two  Year  Warranty 

We  Stock  for  Same  Day  Shipment 


^  30  Day  Return  Policy 

^  Call  or  Email  for  an  Online  Demo 
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Inputs 
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NBB-1600 
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ItositiSio  looks  to  reduce  file  server  latency 


SS!  BY  DENI  CONNOR 

Storage  start-up  Montilio  is  set  to  an¬ 
nounce  a  network  adapter  and  software  it 
says  will  accelerate  file  server  performance 
by  as  much  as  three  to  six  times. 


■  BY  TOM  KRAZIT 

Intel  plans  to  release  a  chipset  and  net¬ 
work  adapter  designed  to  bring  new  IT 
management  technologies  to  business  PCs. 

The  company  last  week  said  its  945G 
chipset  and  Pro/1000  PM  network  chip  will 
begin  to  ship  in  PCs  by  the  end  of  May 

The  features,  such  as  Active  Management 
Technology  (AMT),  are  part  of  Intel’s 
strategy  to  emphasize  other  aspects  of  sys¬ 
tem  performance  rather  than  raw  process¬ 
ing  power.  AMT  is  designed  to  let  IT  admin¬ 
istrators  access  a  protected  portion  of  the 
PC  to  install  software  updates,  run  diagnos¬ 
tic  programs  or  take  inventory  of  their  sys- 


At  Storage  Decisions  in  Chicago  this 
week,  the  company  will  unveil  RapidFile,  a 
PCI-Express  adapter,  which  loads  propri¬ 
etary  File  Server  Re-Director  (FSRD)  soft¬ 
ware  that  bypasses  the  server  memory  and 
PCI  bus,  thus  reducing  latency  and  speed¬ 


terns  even  if  the  PC  is  not  turned  on.  PC  buy¬ 
ers  will  need  to  make  sure  they  purchase  a 
system  with  the  Pro/ 1000  PM  network 
adapter  to  use  this  capability  Intel  says. 

New  PCs  with  the  945G  chipset  now  will 
become  part  of  an  Intel  program  to  help  IT 
managers  avoid  changing  their  software 
images  or  managing  a  network  of  PCs  with 
different  image  types,  Intel  says.  Intel  guar¬ 
antees  IT  departments  that  buy  PCs  based 
on  a  certain  platform  will  not  have  to  up¬ 
date  their  software  images  because  of  hard¬ 
ware  changes  for  at  least  a  year. 

Krazit  is  a  correspondent  with  the  IDG 
News  Service. 


ing  file-server  processing,  Montilio  says. 

CEO  Michael  Tsuk  says  that  traditionally 
two  activities  are  involved  in  file  serving  — 
processing  client  requests  for  data  and 
moving  data  between  the  storage  subsys¬ 
tem  and  client  —  both  of  which  cause 
latency  The  latter  process  takes  consider¬ 
ably  more  bandwidth. 

Companies  such  as  Alacritech  and 
Neterion  have  attempted  to  alleviate  this 
burden  by  using  Remote  Direct  Memory 
Access  and  TCP  Offload  Engines,  ap¬ 
proaches  Tsuk  says  are  more  designed  to 
accelerate  network  traffic  than  make  file 
processing  more  efficient. 

FSRD  creates  an  alternate  data  path  be¬ 
tween  the  client  and  storage  and  redirects 
traffic  across  it,  thus  alleviating  the  server 
memory  from  processing  file  data. 

Arun  Taneja,  founder  of  Taneja  Group, 
says  RapidFile  could  reduce  the  need  for 
customers  to  put  in  faster,  more  efficient, 
network-attached  storage  (NAS). 

“What  Montilio  offers  is  a  way  for  a  Linux 
file  server  to  deliver  NAS-like  performance, 
using  standard  server  software, ’’Taneja  says. 
“The  add-in  card  is  a  simple  way  to  jazz  up 
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thousands  of  general-purpose  servers  that 
are  being  used  as  file  servers.  RapidFile 
could  reduce,  if  not  eliminate,  the  need  for 
many  to  buy  NAS  boxes.” 

The  RapidFile  adapter  has  two  Gigabit 
Ethernet  ports  that  connect  to  the  network 
and  two  2G-bit  Fibre  Channel  ports  for  con¬ 
necting  to  the  storage  system. 

RapidFile,  which  works  in  Linux  file 
servers,  costs  $3,900.  A  Windows  version 
could  be  available  in  the  fourth  quarter. ■ 
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This  Free  Event  is  Coming 
to  a  City  Near  You 


BOSTON,  MA 

June  21,  2005 


DENVER,  CO 

June  23,  2005 


get  the  cures  to  the 
top  ten  broadband 
headaches 

10.  WLAN  deployments:  They’re  cheaper. 
They’re  more  effective.  So  what’s 
the  catch? 

9.  What  the  big  picture  of  wireless 
doesn’t  reveal. 

8.  The  not-so-obvious  trends  and 
opportunities  in  wireless  LANs. 

7.  The  new  802.11  standards  and  what 
to  do  about  them. 

6.  Wide-area  wireless:  What  now? 

...and  5  more  at  the  event! 

who  will  be  there? 

►  Craig  Mathias,  Principal,  Farpoint  Group 
an  advisory  and  systems-integration  firm 

►  IT  professionals  with  authority  over 
broadband  technology  purchasing  and 
implementation,  including: 

•  Network  and  IT  managers/directors 
•VPs  of  Networking 

•VPs  of  IT 

•  CTOs ,  CIOs,  CSOs 
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Seating  is  limited. 
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our  site  at:  www.networkworld.com/WMS5EA1 
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Mark  Gibbs 


Shattered  Mac  illusions 


i 


have  been  Macified.  After  not 
owning  a  Macintosh  for  more 
than  12  years  I  finally  decided 
that  the  undeniable  coolness  and 
beauty  of  the  hardware  and  particu¬ 
larly  of  OS  X  meant  that  it  was  time 
to  get  religion! 

The  beast,  which  arrived  a  couple 
of  weeks  ago,  is  a  Power  Mac  G5  with  dual  2-GHz 
processors  and  1 .5G  bytes  of  RAM  running  OS  X 
Tiger.  What  a  gorgeous  piece  of  engineering!  It  is  an 
elegant  design  even  under  the  hood:  When  you 
need  to  take  off  the  side  to,  for  example,  add  extra 
RAM,  one  latch  frees  the  panel.  And  all  the  subsys¬ 
tems  are  plug-ins,  making  it  incredibly  easy  to  work 
on.  Heaven. 

Then  when  you  run  up  OS  X,  again,  wow. The  oper¬ 
ating  system  has  a  remarkable  polish  —  just  as  if 
someone  had  thought  about  the  design  as  a  whole 
rather  than  finding  and  assembling  a  collection  of 
spare  parts  and  forcing  them  to  fly  in  formation. 

Anyway  back  to  the  Macification:  First  I  fooled 
around  checking  out  all  the  cool  new  features.Tiger 
has  a  lot  of  really  well-implemented  new  stuff  that 
makes  it  significantly  more  powerful. 

Next  I  decided  to  load  my  photographs  into 
iPhoto.My  photo  collection  is  fairly  large,  weighing 
in  at  14,618  files  for  a  total  of  18.7G  bytes. 


I  copied  the  files  to  the  Mac  from  my  Windows 
desktop,  an  XP  system  that  is  misbehaving  to  the 
point  where  it  is  time  to  wipe  it  and  start  again. 
<digression>  It  is  amazing  that  XP  systems  can  get  to 
a  condition  where  it  is  easier  to  erase  and  re-install 
everything  than  diagnose  and  fix  what’s  wrong. 
</digression> 

So  now  that  I  had  the  image  files  on  the  Mac  I 
could  start  loading  them  into  iPhoto.All  seemed  to 
go  well  with  iPhoto  doing  its  indexing  and  thumb- 
nailing,  then  it  finished  —  crash. 

I  restarted  iPhoto. The  program  ran  for  a  couple  of 
minutes  then,  thud!  I  re-imported  the  photos.  IPhoto 
finished  the  import,  stayed  up  again  for  a  couple  of 
minutes,  then  thud.  In  the  middle  of  this  the  10.4.1 
release  of  OS  X  came  out,  which  apparently  includ¬ 
ed  some  iPhoto  improvements,  but  nothing  I  could 
find  mentioned  the  problems  I  was  seeing.  I  applied 
the  upgrade  and  resorted  to  clearing  out  about  5,000 
pictures  and  iPhoto  seemed  to  become  stable  again. 

Now,  let’s  review:  This  was  a  brand-new  machine, 
the  system  detected  no  problems  and  iPhoto  hadn’t 
been  used  before,  but  handling  just  less  than  15,000 
images  made  it  blow  up.  And  I  thought  Mac  applica¬ 
tions  were  generally  considered  to  be  better  than 
Windows  applications.  Evidently  this  is  not  the  case. 

According  to  discussions  I’ve  had  on  lists  and  in 
Apple  forums,  there’s  no  obvious  explanation  for  my 


problems  with  iPhoto.  According  to  Gary  Stock,  CTO 
of  Exfacto:“From  a  Mac  perspective,  the  surprising 
part  is  that  iPhoto  even  tried,  rather  than  warning 
you  when  you  crossed  some  threshold  or  advising 
you  to  reduce  the  dataset.” 

Exactly!  Which  makes  me  think  the  problem  is 
more  fundamental  than  bad  error-handling  in  the 
application,  unless  you  are  willing  to  believe  that 
Apple’s  programmers  are  not  very  skilled. 

From  my  experiences  with  Windows  and  now  OS 
X,  maybe  when  it  comes  to  sophisticated,  multime¬ 
dia  applications  it  doesn’t  matter  what  platform 
we’re  using.  It  may  be  the  case  that  humans  are  not 
capable  of  creating  stable  software  for  the  level  of 
complexity  required. 

Maybe  there’s  a  sort  of  code-complexity  limit  that 
we  have  crossed  in  the  latest  generations  of  comput¬ 
er  systems  that  makes  software  stability  probabilistic 
rather  than  deterministic.  If  so,  it  makes  for  some 
interesting  implications  for  systems  engineering. 

To  begin  with,  managing  systems  in  the  future 
might  be  more  like  psychiatry  than  programming. 

Despite  these  snafus  I  still  love  the  Mac.  It  is  just 
that  my  illusions  are  shattered. 

Condolences  to  backspin@gibbs.com.  Check  out 
Gearblog  (www.  networkworld.  com/weblogs/gear 
blog)  while  you’re  at  it. 
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By  Paul  McNamara 


Addressing  ‘DDoS  extortion’ 

Paying  an  extortionist  a  few  thousand 
dollars  to  leave  your  network  alone 

might  make  bottom-line  business  sense  if  the  alternative  is  enduring  a  distributed 
denial-of-service  attack  that  could  cost  your  company  millions  in  lost  revenue  and 
public  relations  damage. 

The  trouble  is  that  paying  criminals  to  leave  you  be  is  also  dangerously  short¬ 
sighted  —  especially  from  a  broader  societal  standpoint  —  and  ought  to  be  every 
bit  as  much  against  the  law  as  extortion. 

That’s  certainly  not  the  case  today  and  is  unlikely  to  become  so  any  time  soon, 
given  the  clout  of  big  business  and  the  dominant  strain  of  hands-off  regulation  in 
Washington.  And  that  might  be  one  reason  why  reports  of  distributed  DoS-based 
extortion  attempts  are  on  the  rise.  “It’s  happening  enough  that  it  doesn’t  even 
raise  an  eyebrow  anymore,”  says  Ed  Amoroso,  chief  information  security  officer 
at  AT&T,  in  a  story  last  week  by  two  of  my  colleagues,  Network  World  senior  edi¬ 
tors  Denise  Pappalardo  and  Ellen  Messmer  (see  www.networkworld.com, 
DocFinder:  7238). 

Although  the  problem  is  getting  worse,  it  has  been  around  for  several  years.  I 
first  heard  of  the  network  extortion  scam  at  a  2003  security  conference  where  a 
speaker  spun  disturbing  tale  after  disturbing  tale  of  corporate  executives  both 
paying  up  and  clamming  up. 

The  reticence  of  victims  to  speak  out  makes  quantifying  the  phenomenon  diffi- 
cult.The  FBI  tells  us  it  pursues  such  cases  on  a  regular  basis,  although  a  bureau 
spokesman  was  unable  to  provide  specifics.  But  the  brazenness  and  even  the 
"reasonableness"  of  the  criminals  speak  to  the  comfort  with  which  they  work: 
Victims  typically  are  asked  to  wire  payment  to  offshore  banks,  and,  in  some 
cases,  the  perpetrators  are  willing  to  negotiate  on  the  price. 

Current  countermeasures  —  anti-distributed  DoS  products  and  services,  cou¬ 


pled  with  anemic  law  enforcement  —  offer  limited  hope  of  turning  this  tide. 

So  what  should  be  done? 

There  ought  to  be  a  law  that  takes  the  decision  making  out  of  the  victims'  hands. 

Let’s  start  with  the  easiest  part:  Irrespective  of  whether  a  company  chooses  to 
pay,  reporting  such  crimes  to  law  enforcement  should  be  mandated  under  threat 
of  civil  and  criminal  penalties  —  penalties  severe  enough  to  persuade  even  the 
most  bottom-line-conscious  business  executive  to  comply. 

Yes,  criminal  prosecution  of  extortion  might  be  difficult,  most  notably  in  cases  in 
which  criminals  operate  from  countries  unfriendly  to  the  U.S.  But  there  can  be  no 
reasonable  hope  of  legal  deterrence  without  a  universal  embrace  of  the  first  step, 
which  is  calling  the  cops. 

A  tougher  call  is  whether  payments  to  extortionists  should  be  prohibited. 

Some  will  argue  that  I'm  blaming  the  victim  and  that  it's  the  victim’s  right  to  pay. 
They  will  equate  the  decision  to  that  of  paying  a  kidnapper  to  secure  the  safe 
return  of  a  loved  one. 

The  analogy  is  weak,  but,  yes,  in  a  sense  I  am  blaming  the  victim.  After  all,  these 
extortion  attempts  are  crimes  against  all  online  businesses  —  against  all  of  us  — 
not  merely  those  being  targeted  today.  As  long  as  companies  are  willing  to  pay, 
the  ranks  of  extortionists  will  continue  to  grow. 

Addressing  the  responsibilities  of  business  executives  in  no  way  lessens  the 
need  to  step  up  criminal  enforcement  and  diplomatic  pressure  on  governments 
that  countenance  criminals. 

Congress  might  even  get  creative  here.  How  about  funneling  any  fines  collected 
from  businesses  into  a  pool  that  would  be  used  to  offer  discounted  distributed 
DoS-attack  insurance  to  companies  that  pledge  to  abide  by  the  reporting  and 
payment  rules? 

Details  aside,  something  has  to  change.The  alternative  is  to  continue  to  treat 
extortion  payments  as  just  another  business  expense. . . .  And  that  is  nuts. 

Have  a  better  idea?  The  address  is  buzz@nww.com. 
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